CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111057

    🚨 CVE-2026-111057 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a...

  • CVE-2026-111058

    🚨 CVE-2026-111058 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default...

  • CVE-2026-112303

    🚨 CVE-2026-112303 GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource...

  • CVE-2026-112304

    🚨 CVE-2026-112304 docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with...

  • CVE-2026-112308

    🚨 CVE-2026-112308 crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers...

  • CVE-2026-112309

    🚨 CVE-2026-112309 @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to...

  • CVE-2026-112310

    🚨 CVE-2026-112310 docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by...

  • CVE-2026-112363

    🚨 CVE-2026-112363 Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows...

  • CVE-2026-112366

    🚨 CVE-2026-112366 Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event...

  • CVE-2026-112368

    🚨 CVE-2026-112368 An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who...

  • CVE-2026-12254

    🚨 CVE-2026-12254 Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an...

  • CVE-2025-10149

    🚨 CVE-2025-10149 The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local...

  • CVE-2025-13173

    🚨 CVE-2025-13173 Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO...

  • CVE-2025-13591

    🚨 CVE-2025-13591 The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist...

  • CVE-2025-6623

    🚨 CVE-2025-6623 The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the...

  • CVE-2025-7043

    🚨 CVE-2025-7043 The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access...

  • CVE-2025-7203

    🚨 CVE-2025-7203 The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and...

  • CVE-2026-103038

    🚨 CVE-2026-103038 PingTools Network Utilities 4.64 Free accepts an arbitrary value in the Host field of a Watcher ICMP service, incorporating that...

Статистика статей

Статьи
53,084
Просмотры
234,256
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху