CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-55275

    🚨 CVE-2026-55275 In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of...

  • CVE-2026-55283

    🚨 CVE-2026-55283 In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of...

  • CVE-2026-55287

    🚨 CVE-2026-55287 In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account...

  • CVE-2026-55288

    🚨 CVE-2026-55288 In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could...

  • CVE-2026-55289

    🚨 CVE-2026-55289 In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This...

  • CVE-2026-121447

    🚨 CVE-2026-121447 svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by placing...

  • CVE-2026-121558

    🚨 CVE-2026-121558 AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that...

  • CVE-2026-121562

    🚨 CVE-2026-121562 CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes...

  • CVE-2026-119485

    🚨 CVE-2026-119485 Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-121262

    🚨 CVE-2026-121262 A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file...

  • CVE-2026-121588

    🚨 CVE-2026-121588 TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability that allows attackers to execute script...

  • CVE-2026-121631

    🚨 CVE-2026-121631 Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability in the RenameService that allows authenticated...

  • CVE-2026-38601

    🚨 CVE-2026-38601 A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID...

  • CVE-2026-121627

    🚨 CVE-2026-121627 buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows...

  • CVE-2026-44265

    🚨 CVE-2026-44265 Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary...

  • CVE-2026-63436

    🚨 CVE-2026-63436 zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.0, the...

  • CVE-2026-63417

    🚨 CVE-2026-63417 Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys...

  • CVE-2026-82976

    🚨 CVE-2026-82976 A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller...

Статистика статей

Статьи
53,082
Просмотры
206,137
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху