CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112292

    🚨 CVE-2026-112292 CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and...

  • CVE-2026-112293

    🚨 CVE-2026-112293 BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team...

  • CVE-2026-112294

    🚨 CVE-2026-112294 FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows...

  • CVE-2026-112295

    🚨 CVE-2026-112295 FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected...

  • CVE-2026-112296

    🚨 CVE-2026-112296 FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain...

  • CVE-2026-8168

    🚨 CVE-2026-8168 Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a...

  • CVE-2026-107194

    🚨 CVE-2026-107194 Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request...

  • CVE-2026-88647

    🚨 CVE-2026-88647 A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop...

  • CVE-2026-67693

    🚨 CVE-2026-67693 An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509...

  • CVE-2026-84012

    🚨 CVE-2026-84012 Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  • CVE-2026-84013

    🚨 CVE-2026-84013 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

  • CVE-2026-84014

    🚨 CVE-2026-84014 Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  • CVE-2026-84015

    🚨 CVE-2026-84015 Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code...

  • CVE-2026-84016

    🚨 CVE-2026-84016 Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

  • CVE-2026-84017

    🚨 CVE-2026-84017 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over...

  • CVE-2026-102066

    🚨 CVE-2026-102066 A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks...

  • CVE-2026-101952

    🚨 CVE-2026-101952 An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos...

  • CVE-2026-102460

    🚨 CVE-2026-102460 In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability...

Статистика статей

Статьи
53,082
Просмотры
216,320
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху