CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-84233

    🚨 CVE-2026-84233 A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a...

  • CVE-2026-84267

    🚨 CVE-2026-84267 A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate...

  • CVE-2026-84269

    🚨 CVE-2026-84269 A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process...

  • CVE-2026-84270

    🚨 CVE-2026-84270 A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts...

  • CVE-2026-84470

    🚨 CVE-2026-84470 A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST...

  • CVE-2026-84837

    🚨 CVE-2026-84837 A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a...

  • CVE-2026-84838

    🚨 CVE-2026-84838 A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands...

  • CVE-2026-85150

    🚨 CVE-2026-85150 A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an...

  • CVE-2026-84185

    🚨 CVE-2026-84185 A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE)...

  • CVE-2026-81666

    🚨 CVE-2026-81666 An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these...

  • CVE-2026-85769

    🚨 CVE-2026-85769 A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state (for example during...

  • CVE-2026-76925

    🚨 CVE-2026-76925 A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the...

  • CVE-2026-86469

    🚨 CVE-2026-86469 A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the...

  • CVE-2026-74859

    🚨 CVE-2026-74859 The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a...

  • CVE-2026-84828

    🚨 CVE-2026-84828 A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit...

  • CVE-2026-77159

    🚨 CVE-2026-77159 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on...

  • CVE-2026-85013

    🚨 CVE-2026-85013 A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named...

  • CVE-2026-79705

    🚨 CVE-2026-79705 A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху