CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112157

    🚨 CVE-2026-112157 A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function...

  • CVE-2026-112158

    🚨 CVE-2026-112158 A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file...

  • CVE-2026-112303

    🚨 CVE-2026-112303 GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource...

  • CVE-2026-112304

    🚨 CVE-2026-112304 docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with...

  • CVE-2026-112305

    🚨 CVE-2026-112305 Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to...

  • CVE-2026-112306

    🚨 CVE-2026-112306 NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to...

  • CVE-2026-112307

    🚨 CVE-2026-112307 sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying...

  • CVE-2026-112308

    🚨 CVE-2026-112308 crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers...

  • CVE-2026-112309

    🚨 CVE-2026-112309 @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to...

  • CVE-2026-112363

    🚨 CVE-2026-112363 Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows...

  • CVE-2026-112366

    🚨 CVE-2026-112366 Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event...

  • CVE-2026-112368

    🚨 CVE-2026-112368 An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who...

  • CVE-2026-12254

    🚨 CVE-2026-12254 Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an...

  • CVE-2026-100790

    🚨 CVE-2026-100790 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17...

  • CVE-2025-23368

    🚨 CVE-2025-23368 A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed...

  • CVE-2025-49588

    🚨 CVE-2025-49588 Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In version...

  • CVE-2025-53375

    🚨 CVE-2025-53375 Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and...

  • CVE-2025-50234

    🚨 CVE-2025-50234 MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic...

Статистика статей

Статьи
53,082
Просмотры
220,230
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху