CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-12148

    🚨 CVE-2026-12148 IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to...

  • CVE-2026-12155

    🚨 CVE-2026-12155 IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages...

  • CVE-2026-12343

    🚨 CVE-2026-12343 IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header...

  • CVE-2026-12350

    🚨 CVE-2026-12350 IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume...

  • CVE-2026-12660

    🚨 CVE-2026-12660 IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path...

  • CVE-2026-12665

    🚨 CVE-2026-12665 IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates...

  • CVE-2026-12669

    🚨 CVE-2026-12669 IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though...

  • CVE-2026-12670

    🚨 CVE-2026-12670 IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers...

  • CVE-2026-12727

    🚨 CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when...

  • CVE-2026-14511

    🚨 CVE-2026-14511 IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted...

  • CVE-2026-15661

    🚨 CVE-2026-15661 IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of...

  • CVE-2026-6930

    🚨 CVE-2026-6930 IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...

  • CVE-2023-38375

    🚨 CVE-2023-38375 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed...

  • CVE-2025-52290

    🚨 CVE-2025-52290 A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows...

  • CVE-2025-55654

    🚨 CVE-2025-55654 A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to...

  • CVE-2025-60480

    🚨 CVE-2025-60480 A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box...

  • CVE-2026-105810

    🚨 CVE-2026-105810 Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An...

  • CVE-2026-107084

    🚨 CVE-2026-107084 Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against...

Статистика статей

Статьи
53,084
Просмотры
235,818
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху