CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-108759

    🚨 CVE-2026-108759 mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code...

  • CVE-2026-108839

    🚨 CVE-2026-108839 thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs...

  • CVE-2026-108854

    🚨 CVE-2026-108854 Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to...

  • CVE-2026-108859

    🚨 CVE-2026-108859 mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote...

  • CVE-2026-108864

    🚨 CVE-2026-108864 iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated...

  • CVE-2026-108869

    🚨 CVE-2026-108869 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send...

  • CVE-2026-109199

    🚨 CVE-2026-109199 LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS...

  • CVE-2026-109227

    🚨 CVE-2026-109227 SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes...

  • CVE-2026-109393

    🚨 CVE-2026-109393 QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of...

  • CVE-2026-109399

    🚨 CVE-2026-109399 SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c...

  • CVE-2026-109241

    🚨 CVE-2026-109241 FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows...

  • CVE-2026-109246

    🚨 CVE-2026-109246 FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a...

  • CVE-2026-109251

    🚨 CVE-2026-109251 FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface...

  • CVE-2026-109256

    🚨 CVE-2026-109256 FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer...

  • CVE-2026-109261

    🚨 CVE-2026-109261 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not...

  • CVE-2026-109266

    🚨 CVE-2026-109266 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not...

  • CVE-2026-109271

    🚨 CVE-2026-109271 ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory...

  • CVE-2026-109276

    🚨 CVE-2026-109276 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove...

Статистика статей

Статьи
53,082
Просмотры
200,099
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху