CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.
  • CVE-2026-112273

    🚨 CVE-2026-112273 libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote...
  • CVE-2026-112274

    🚨 CVE-2026-112274 libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read...
  • CVE-2026-112275

    🚨 CVE-2026-112275 Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder...
  • CVE-2026-112276

    🚨 CVE-2026-112276 Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory...
  • CVE-2026-112277

    🚨 CVE-2026-112277 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP...
  • CVE-2026-112278

    🚨 CVE-2026-112278 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows...
  • CVE-2026-112279

    🚨 CVE-2026-112279 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious...
  • CVE-2026-112280

    🚨 CVE-2026-112280 libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to...
  • CVE-2026-112281

    🚨 CVE-2026-112281 libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c...
  • CVE-2026-112282

    🚨 CVE-2026-112282 VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to...
  • CVE-2026-112284

    🚨 CVE-2026-112284 libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the...
  • CVE-2026-112285

    🚨 CVE-2026-112285 Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass...
  • CVE-2026-112286

    🚨 CVE-2026-112286 Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated...
  • CVE-2026-112287

    🚨 CVE-2026-112287 Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows...
  • CVE-2026-112288

    🚨 CVE-2026-112288 Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to...
  • CVE-2026-112289

    🚨 CVE-2026-112289 Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by...
  • CVE-2026-112290

    🚨 CVE-2026-112290 Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site...
  • CVE-2026-112291

    🚨 CVE-2026-112291 Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index...

Статистика статей

Статьи
53,082
Просмотры
216,320
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху