CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-85234

    🚨 CVE-2026-85234 A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty...

  • CVE-2026-76781

    🚨 CVE-2026-76781 A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer...

  • CVE-2026-89059

    🚨 CVE-2026-89059 A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit...

  • CVE-2026-75883

    🚨 CVE-2026-75883 A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By...

  • CVE-2026-94449

    🚨 CVE-2026-94449 A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit...

  • CVE-2026-84499

    🚨 CVE-2026-84499 A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are...

  • CVE-2026-84712

    🚨 CVE-2026-84712 A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView...

  • CVE-2026-84716

    🚨 CVE-2026-84716 A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an...

  • CVE-2026-84717

    🚨 CVE-2026-84717 A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook...

  • CVE-2026-84718

    🚨 CVE-2026-84718 A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the...

  • CVE-2026-84720

    🚨 CVE-2026-84720 A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database...

  • CVE-2026-84724

    🚨 CVE-2026-84724 An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The...

  • CVE-2026-80048

    🚨 CVE-2026-80048 A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this...

  • CVE-2026-86561

    🚨 CVE-2026-86561 A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which...

  • CVE-2026-86566

    🚨 CVE-2026-86566 A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a...

  • CVE-2026-86845

    🚨 CVE-2026-86845 A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does...

  • CVE-2026-86846

    🚨 CVE-2026-86846 A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds...

  • CVE-2026-86847

    🚨 CVE-2026-86847 A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху