CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10248

    🚨 CVE-2025-10248 XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file...

  • CVE-2026-118492

    🚨 CVE-2026-118492 In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messages before...

  • CVE-2026-12080

    🚨 CVE-2026-12080 A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the...

  • CVE-2026-16313

    🚨 CVE-2026-16313 A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data...

  • CVE-2026-71226

    🚨 CVE-2026-71226 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted...

  • CVE-2026-91147

    🚨 CVE-2026-91147 A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS)...

  • CVE-2026-76235

    🚨 CVE-2026-76235 A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that...

  • CVE-2026-103441

    🚨 CVE-2026-103441 Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage...

  • CVE-2026-103442

    🚨 CVE-2026-103442 External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension...

  • CVE-2026-80490

    🚨 CVE-2026-80490 Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The...

  • CVE-2026-19445

    🚨 CVE-2026-19445 A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a...

  • CVE-2026-66248

    🚨 CVE-2026-66248 iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger...

  • CVE-2026-66249

    🚨 CVE-2026-66249 iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted...

  • CVE-2026-66253

    🚨 CVE-2026-66253 iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned...

  • CVE-2026-12542

    🚨 CVE-2026-12542 A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval...

  • CVE-2026-110633

    🚨 CVE-2026-110633 MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the...

  • CVE-2026-110656

    🚨 CVE-2026-110656 miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's...

  • CVE-2026-110661

    🚨 CVE-2026-110661 CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash...

Статистика статей

Статьи
53,082
Просмотры
202,951
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху