CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-98630

    🚨 CVE-2026-98630 In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page pool error cleanup The payload...

  • CVE-2026-108689

    🚨 CVE-2026-108689 Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other...

  • CVE-2025-65958

    🚨 CVE-2025-65958 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side...

  • CVE-2026-98631

    🚨 CVE-2026-98631 In the Linux kernel, the following vulnerability has been resolved: xsk: Use a 32-bit compare in xsk_map_gen_lookup...

  • CVE-2026-108694

    🚨 CVE-2026-108694 ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files...

  • CVE-2025-13543

    🚨 CVE-2025-13543 The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the...

  • CVE-2026-98632

    🚨 CVE-2026-98632 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on...

  • CVE-2026-108702

    🚨 CVE-2026-108702 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any...

  • CVE-2025-27935

    🚨 CVE-2025-27935 The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server...

  • CVE-2026-98633

    🚨 CVE-2026-98633 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()...

  • CVE-2026-108707

    🚨 CVE-2026-108707 Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated...

  • CVE-2025-65959

    🚨 CVE-2025-65959 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Stored XSS...

  • CVE-2026-98634

    🚨 CVE-2026-98634 In the Linux kernel, the following vulnerability has been resolved: scsi: sd_zbc: Reject disks with too many zones...

  • CVE-2026-108713

    🚨 CVE-2026-108713 SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to...

  • CVE-2025-66479

    🚨 CVE-2025-66479 Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary...

  • CVE-2026-98635

    🚨 CVE-2026-98635 In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zones_cond out-of-bounds write on zone...

  • CVE-2026-108718

    🚨 CVE-2026-108718 Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization...

  • CVE-2025-66555

    🚨 CVE-2025-66555 AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary...

Статистика статей

Статьи
53,082
Просмотры
192,467
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху