CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-86404

    🚨 CVE-2026-86404 EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses...

  • CVE-2026-21589

    🚨 CVE-2026-21589 This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data...

  • CVE-2026-42616

    🚨 CVE-2026-42616 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in...

  • CVE-2025-70515

    🚨 CVE-2025-70515 The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied...

  • CVE-2026-95125

    🚨 CVE-2026-95125 libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed...

  • CVE-2026-78796

    🚨 CVE-2026-78796 An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote...

  • CVE-2025-61560

    🚨 CVE-2025-61560 A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers...

  • CVE-2026-75353

    🚨 CVE-2026-75353 OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser...

  • CVE-2026-104584

    🚨 CVE-2026-104584 reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command...

  • CVE-2026-83935

    🚨 CVE-2026-83935 Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

  • CVE-2026-84007

    🚨 CVE-2026-84007 Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

  • CVE-2026-84009

    🚨 CVE-2026-84009 Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform...

  • CVE-2026-110453

    🚨 CVE-2026-110453 Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

  • CVE-2026-50218

    🚨 CVE-2026-50218 Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By...

  • CVE-2026-110907

    🚨 CVE-2026-110907 Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like...

  • CVE-2026-93483

    🚨 CVE-2026-93483 In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive...

  • CVE-2026-106706

    🚨 CVE-2026-106706 XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor...

  • CVE-2026-106708

    🚨 CVE-2026-106708 XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller...

Статистика статей

Статьи
53,082
Просмотры
224,175
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху