CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-82910

    🚨 CVE-2026-82910 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in MacroScreenRenderer...

  • CVE-2026-82912

    🚨 CVE-2026-82912 Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression Language Injection') in...

  • CVE-2026-82960

    🚨 CVE-2026-82960 Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms plugin before 24.09.08 on all...

  • CVE-2026-83542

    🚨 CVE-2026-83542 Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-84183

    🚨 CVE-2026-84183 Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layout/LayoutEvents.xml in Apache...

  • CVE-2026-85627

    🚨 CVE-2026-85627 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache OFBiz 24.09...

  • CVE-2026-123158

    🚨 CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication...

  • CVE-2026-121994

    🚨 CVE-2026-121994 A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute...

  • CVE-2026-121997

    🚨 CVE-2026-121997 A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code...

  • CVE-2026-89142

    🚨 CVE-2026-89142 In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of...

  • CVE-2026-114366

    🚨 CVE-2026-114366 An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module.

  • CVE-2026-119432

    🚨 CVE-2026-119432 A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker...

  • CVE-2026-119433

    🚨 CVE-2026-119433 A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient...

  • CVE-2026-58016

    🚨 CVE-2026-58016 A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file...

  • CVE-2026-121621

    🚨 CVE-2026-121621 A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git repository is...

  • CVE-2026-43961

    🚨 CVE-2026-43961 A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of...

  • CVE-2026-120194

    🚨 CVE-2026-120194 A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a...

  • CVE-2026-74860

    🚨 CVE-2026-74860 A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a...

Статистика статей

Статьи
53,084
Просмотры
240,345
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху