CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121435

    🚨 CVE-2026-121435 Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows authenticated customers to create MySQL...

  • CVE-2026-121439

    🚨 CVE-2026-121439 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3 that allows...

  • CVE-2026-121443

    🚨 CVE-2026-121443 svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash requests...

  • CVE-2026-121451

    🚨 CVE-2026-121451 AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration...

  • CVE-2026-121455

    🚨 CVE-2026-121455 DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to...

  • CVE-2026-121546

    🚨 CVE-2026-121546 ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape...

  • CVE-2026-121550

    🚨 CVE-2026-121550 nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main()...

  • CVE-2026-121554

    🚨 CVE-2026-121554 cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to...

  • CVE-2026-120749

    🚨 CVE-2026-120749 A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an...

  • CVE-2026-17117

    🚨 CVE-2026-17117 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...

  • CVE-2026-17239

    🚨 CVE-2026-17239 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a path...

  • CVE-2026-121403

    🚨 CVE-2026-121403 FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated...

  • CVE-2026-121407

    🚨 CVE-2026-121407 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows...

  • CVE-2026-121411

    🚨 CVE-2026-121411 FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT...

  • CVE-2026-121419

    🚨 CVE-2026-121419 SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerprint uses...

  • CVE-2026-121423

    🚨 CVE-2026-121423 SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surreald...

  • CVE-2026-121427

    🚨 CVE-2026-121427 AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for users lacking the...

  • CVE-2026-121431

    🚨 CVE-2026-121431 AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks permission...

Статистика статей

Статьи
53,082
Просмотры
206,137
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху