CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58934

    🚨 CVE-2026-58934 In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the...

  • CVE-2024-33396

    🚨 CVE-2024-33396 An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get...

  • CVE-2026-101296

    🚨 CVE-2026-101296 A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non...

  • CVE-2026-101307

    🚨 CVE-2026-101307 When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the...

  • CVE-2026-116250

    🚨 CVE-2026-116250 In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and...

  • CVE-2026-77876

    🚨 CVE-2026-77876 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory...

  • CVE-2026-77880

    🚨 CVE-2026-77880 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password...

  • CVE-2026-119731

    🚨 CVE-2026-119731 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST...

  • CVE-2026-119735

    🚨 CVE-2026-119735 Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to...

  • CVE-2026-119739

    🚨 CVE-2026-119739 The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic...

  • CVE-2026-120503

    🚨 CVE-2026-120503 A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. This affects an unknown part of the file /api/status of...

  • CVE-2026-120830

    🚨 CVE-2026-120830 A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response, the length of the quoted original...

  • CVE-2026-120833

    🚨 CVE-2026-120833 labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes...

  • CVE-2026-105979

    🚨 CVE-2026-105979 Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system...

  • CVE-2026-121387

    🚨 CVE-2026-121387 FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP...

  • CVE-2026-121391

    🚨 CVE-2026-121391 FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close previous...

  • CVE-2026-121395

    🚨 CVE-2026-121395 FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR...

  • CVE-2026-121399

    🚨 CVE-2026-121399 FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD Gateway to...

Статистика статей

Статьи
53,082
Просмотры
206,137
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху