CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58099

    🚨 CVE-2026-58099 When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to...

  • CVE-2026-58100

    🚨 CVE-2026-58100 kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds...

  • CVE-2026-111555

    🚨 CVE-2026-111555 A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or...

  • CVE-2026-111710

    🚨 CVE-2026-111710 Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth()...

  • CVE-2026-111715

    🚨 CVE-2026-111715 Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employees read...

  • CVE-2026-111720

    🚨 CVE-2026-111720 fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows...

  • CVE-2026-89098

    🚨 CVE-2026-89098 A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on...

  • CVE-2026-107674

    🚨 CVE-2026-107674 IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using...

  • CVE-2026-17491

    🚨 CVE-2026-17491 IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper...

  • CVE-2026-85977

    🚨 CVE-2026-85977 A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies...

  • CVE-2026-102607

    🚨 CVE-2026-102607 ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function...

  • CVE-2026-108374

    🚨 CVE-2026-108374 ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status...

  • CVE-2026-96542

    🚨 CVE-2026-96542 Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371...

  • CVE-2026-62439

    🚨 CVE-2026-62439 A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image...

  • CVE-2026-96627

    🚨 CVE-2026-96627 Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in...

  • CVE-2026-111823

    🚨 CVE-2026-111823 Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

  • CVE-2026-104734

    🚨 CVE-2026-104734 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injection in...

  • CVE-2026-107762

    🚨 CVE-2026-107762 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object...

Статистика статей

Статьи
53,082
Просмотры
216,320
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху