CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-98649

    🚨 CVE-2026-98649 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in _destroy_pages_crste() Use...

  • CVE-2026-109199

    🚨 CVE-2026-109199 LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS...

  • CVE-2025-66559

    🚨 CVE-2025-66559 Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its...

  • CVE-2026-98650

    🚨 CVE-2026-98650 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix potential races in dat skey functions When...

  • CVE-2026-109227

    🚨 CVE-2026-109227 SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes...

  • CVE-2025-66561

    🚨 CVE-2025-66561 SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS)...

  • CVE-2026-98651

    🚨 CVE-2026-98651 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in...

  • CVE-2026-109393

    🚨 CVE-2026-109393 QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of...

  • CVE-2025-66563

    🚨 CVE-2025-66563 Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which...

  • CVE-2026-98652

    🚨 CVE-2026-98652 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvm_s390_set_irq_state()...

  • CVE-2026-109399

    🚨 CVE-2026-109399 SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c...

  • CVE-2025-66564

    🚨 CVE-2025-66564 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest...

  • CVE-2026-98653

    🚨 CVE-2026-98653 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix _gaccess_shadow_fault() In some...

  • CVE-2026-109241

    🚨 CVE-2026-109241 FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows...

  • CVE-2025-12181

    🚨 CVE-2025-12181 The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

  • CVE-2026-98654

    🚨 CVE-2026-98654 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atomize IRQ register read/modify/write ops...

  • CVE-2026-112033

    🚨 CVE-2026-112033 A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function...

  • CVE-2026-109246

    🚨 CVE-2026-109246 FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a...

Статистика статей

Статьи
53,082
Просмотры
192,467
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху