CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-85249

    🚨 CVE-2026-85249 Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before...

  • CVE-2026-85250

    🚨 CVE-2026-85250 Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache...

  • CVE-2026-85251

    🚨 CVE-2026-85251 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects...

  • CVE-2026-85257

    🚨 CVE-2026-85257 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects...

  • CVE-2026-85260

    🚨 CVE-2026-85260 Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel...

  • CVE-2026-85296

    🚨 CVE-2026-85296 Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from...

  • CVE-2026-112139

    🚨 CVE-2026-112139 A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578...

  • CVE-2026-111845

    🚨 CVE-2026-111845 Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting...

  • CVE-2026-112214

    🚨 CVE-2026-112214 A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled...

  • CVE-2026-111915

    🚨 CVE-2026-111915 Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary...

  • CVE-2026-111938

    🚨 CVE-2026-111938 Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other...

  • CVE-2026-112143

    🚨 CVE-2026-112143 A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a...

  • CVE-2026-112265

    🚨 CVE-2026-112265 LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to...

  • CVE-2026-112270

    🚨 CVE-2026-112270 SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in...

  • CVE-2026-112275

    🚨 CVE-2026-112275 Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder...

  • CVE-2026-112280

    🚨 CVE-2026-112280 libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to...

  • CVE-2026-112285

    🚨 CVE-2026-112285 Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass...

  • CVE-2026-112290

    🚨 CVE-2026-112290 Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху