CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123151

    🚨 CVE-2026-123151 A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to...

  • CVE-2026-116472

    🚨 CVE-2026-116472 A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial...

  • CVE-2026-116568

    🚨 CVE-2026-116568 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a...

  • CVE-2026-116572

    🚨 CVE-2026-116572 FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow...

  • CVE-2026-116787

    🚨 CVE-2026-116787 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a...

  • CVE-2026-111062

    🚨 CVE-2026-111062 russh is a Rust SSH client and server library. From version 0.34.0-beta.1 until version 0.64.0, its SSH server does not require...

  • CVE-2026-48705

    🚨 CVE-2026-48705 MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader._get_affine() trusts...

  • CVE-2026-49272

    🚨 CVE-2026-49272 OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628...

  • CVE-2026-100395

    🚨 CVE-2026-100395 LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. In LXC 7.0.0...

  • CVE-2026-111489

    🚨 CVE-2026-111489 A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform...

  • CVE-2026-111490

    🚨 CVE-2026-111490 Insecure direct object reference (IDOR) vulnerability in the MatchPoint API, which relies on the `actingasuser` HTTP header...

  • CVE-2026-111491

    🚨 CVE-2026-111491 Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker...

  • CVE-2026-111492

    🚨 CVE-2026-111492 SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud...

  • CVE-2026-111493

    🚨 CVE-2026-111493 Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded...

  • CVE-2026-111494

    🚨 CVE-2026-111494 Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a...

  • CVE-2026-111495

    🚨 CVE-2026-111495 API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through reverse...

  • CVE-2026-111768

    🚨 CVE-2026-111768 The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol...

  • CVE-2026-111770

    🚨 CVE-2026-111770 The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol...

Статистика статей

Статьи
53,084
Просмотры
241,056
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху