CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111755

    🚨 CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1...

  • CVE-2026-111759

    🚨 CVE-2026-111759 markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can...

  • CVE-2026-112377

    🚨 CVE-2026-112377 CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection...

  • CVE-2026-11319

    🚨 CVE-2026-11319 TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported...

  • CVE-2026-1501

    🚨 CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

  • CVE-2026-1510

    🚨 CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

  • CVE-2026-3161

    🚨 CVE-2026-3161 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to...

  • CVE-2026-3295

    🚨 CVE-2026-3295 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly...

  • CVE-2026-3303

    🚨 CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged...

  • CVE-2026-3628

    🚨 CVE-2026-3628 IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

  • CVE-2026-4405

    🚨 CVE-2026-4405 IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

  • CVE-2026-4413

    🚨 CVE-2026-4413 IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to...

  • CVE-2026-4418

    🚨 CVE-2026-4418 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject...

  • CVE-2025-60482

    🚨 CVE-2025-60482 A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box...

  • CVE-2026-55644

    🚨 CVE-2026-55644 Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist...

  • CVE-2026-109434

    🚨 CVE-2026-109434 Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to...

  • CVE-2026-6719

    🚨 CVE-2026-6719 IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...

  • CVE-2026-112259

    🚨 CVE-2026-112259 A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference...

Статистика статей

Статьи
53,084
Просмотры
235,818
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху