CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-11730

    🚨 CVE-2026-11730 Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having...

  • CVE-2026-110450

    🚨 CVE-2026-110450 Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then...

  • CVE-2026-109969

    🚨 CVE-2026-109969 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without...

  • CVE-2026-104086

    🚨 CVE-2026-104086 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler...

  • CVE-2026-80092

    🚨 CVE-2026-80092 Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges...

  • CVE-2026-111876

    🚨 CVE-2026-111876 A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the...

  • CVE-2026-110365

    🚨 CVE-2026-110365 Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly...

  • CVE-2026-110885

    🚨 CVE-2026-110885 Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code...

  • CVE-2026-112008

    🚨 CVE-2026-112008 libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt...

  • CVE-2026-112063

    🚨 CVE-2026-112063 libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to...

  • CVE-2026-112262

    🚨 CVE-2026-112262 RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write...

  • CVE-2026-112267

    🚨 CVE-2026-112267 SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows...

  • CVE-2026-112277

    🚨 CVE-2026-112277 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP...

  • CVE-2025-55667

    🚨 CVE-2025-55667 A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box...

  • CVE-2026-111766

    🚨 CVE-2026-111766 markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the...

  • CVE-2026-112254

    🚨 CVE-2026-112254 A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of...

  • CVE-2026-112260

    🚨 CVE-2026-112260 A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read...

  • CVE-2026-112297

    🚨 CVE-2026-112297 A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the...

Статистика статей

Статьи
53,082
Просмотры
226,877
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху