CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112284

    🚨 CVE-2026-112284 libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the...

  • CVE-2026-112289

    🚨 CVE-2026-112289 Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by...

  • CVE-2026-112294

    🚨 CVE-2026-112294 FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows...

  • CVE-2026-112151

    🚨 CVE-2026-112151 A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by...

  • CVE-2026-109431

    🚨 CVE-2026-109431 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task...

  • CVE-2026-111045

    🚨 CVE-2026-111045 CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace...

  • CVE-2026-112305

    🚨 CVE-2026-112305 Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to...

  • CVE-2026-112310

    🚨 CVE-2026-112310 docling-core through 2.102.0 contains a local file disclosure vulnerability that allows attackers to read local images by...

  • CVE-2026-111065

    🚨 CVE-2026-111065 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow...

  • CVE-2026-11828

    🚨 CVE-2026-11828 IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a...

  • CVE-2026-12343

    🚨 CVE-2026-12343 IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header...

  • CVE-2023-38375

    🚨 CVE-2023-38375 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed...

  • CVE-2025-52290

    🚨 CVE-2025-52290 A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows...

  • CVE-2025-55654

    🚨 CVE-2025-55654 A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to...

  • CVE-2025-55667

    🚨 CVE-2025-55667 A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box...

  • CVE-2025-60480

    🚨 CVE-2025-60480 A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box...

  • CVE-2026-105810

    🚨 CVE-2026-105810 Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An...

  • CVE-2026-111755

    🚨 CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1...

Статистика статей

Статьи
53,082
Просмотры
222,786
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху