CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-103314

    🚨 CVE-2026-103314 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does...

  • CVE-2026-112214

    🚨 CVE-2026-112214 A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled...

  • CVE-2026-38671

    🚨 CVE-2026-38671 Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior...

  • CVE-2026-110008

    🚨 CVE-2026-110008 @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier...

  • CVE-2026-111883

    🚨 CVE-2026-111883 Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or...

  • CVE-2026-111915

    🚨 CVE-2026-111915 Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary...

  • CVE-2026-111925

    🚨 CVE-2026-111925 Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside...

  • CVE-2026-111935

    🚨 CVE-2026-111935 NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to...

  • CVE-2026-111936

    🚨 CVE-2026-111936 Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in...

  • CVE-2026-111937

    🚨 CVE-2026-111937 Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other...

  • CVE-2026-111938

    🚨 CVE-2026-111938 Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other...

  • CVE-2026-111939

    🚨 CVE-2026-111939 Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create...

  • CVE-2026-112262

    🚨 CVE-2026-112262 RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write...

  • CVE-2026-112263

    🚨 CVE-2026-112263 Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands...

  • CVE-2026-112264

    🚨 CVE-2026-112264 BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build...

  • CVE-2026-112268

    🚨 CVE-2026-112268 sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the...

  • CVE-2026-112271

    🚨 CVE-2026-112271 libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c...

  • CVE-2026-112272

    🚨 CVE-2026-112272 Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that...

Статистика статей

Статьи
53,084
Просмотры
234,256
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху