CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-99999

    🚨 CVE-2026-99999 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If...

  • CVE-2026-110927

    🚨 CVE-2026-110927 A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet...

  • CVE-2026-108373

    🚨 CVE-2026-108373 ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in the...

  • CVE-2026-49410

    🚨 CVE-2026-49410 OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow...

  • CVE-2026-17591

    🚨 CVE-2026-17591 A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a...

  • CVE-2026-111854

    🚨 CVE-2026-111854 An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem...

  • CVE-2025-71435

    🚨 CVE-2025-71435 Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after...

  • CVE-2026-111881

    🚨 CVE-2026-111881 FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation...

  • CVE-2026-111892

    🚨 CVE-2026-111892 phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and...

  • CVE-2026-111897

    🚨 CVE-2026-111897 phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to...

  • CVE-2026-111903

    🚨 CVE-2026-111903 phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users...

  • CVE-2026-111908

    🚨 CVE-2026-111908 phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the...

  • CVE-2026-111913

    🚨 CVE-2026-111913 Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists...

  • CVE-2026-111924

    🚨 CVE-2026-111924 Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by...

  • CVE-2026-111930

    🚨 CVE-2026-111930 Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint, which...

  • CVE-2026-111933

    🚨 CVE-2026-111933 Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration...

  • CVE-2026-111934

    🚨 CVE-2026-111934 Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost...

  • CVE-2026-111865

    🚨 CVE-2026-111865 A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function...

Статистика статей

Статьи
53,084
Просмотры
237,111
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху