CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-18508

    🚨 CVE-2026-18508 A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the...

  • CVE-2026-18651

    🚨 CVE-2026-18651 A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials...

  • CVE-2026-18477

    🚨 CVE-2026-18477 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker...

  • CVE-2026-19079

    🚨 CVE-2026-19079 A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When...

  • CVE-2026-19404

    🚨 CVE-2026-19404 A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations...

  • CVE-2026-24329

    🚨 CVE-2026-24329 A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the...

  • CVE-2026-24330

    🚨 CVE-2026-24330 A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious...

  • CVE-2026-19391

    🚨 CVE-2026-19391 A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal...

  • CVE-2026-18663

    🚨 CVE-2026-18663 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session...

  • CVE-2026-19548

    🚨 CVE-2026-19548 Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a...

  • CVE-2026-18726

    🚨 CVE-2026-18726 A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial...

  • CVE-2026-18727

    🚨 CVE-2026-18727 A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read...

  • CVE-2026-18728

    🚨 CVE-2026-18728 A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component, specifically during IPv4 Dynamic...

  • CVE-2026-19730

    🚨 CVE-2026-19730 The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TRUNC. When...

  • CVE-2026-19879

    🚨 CVE-2026-19879 A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a...

  • CVE-2026-49419

    🚨 CVE-2026-49419 When the JAIL_AT_DESC flag is specified, kern_jail_set() and kern_jail_get() released the reference to the caller's current...

  • CVE-2026-18495

    🚨 CVE-2026-18495 A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation...

  • CVE-2026-86963

    🚨 CVE-2026-86963 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27...

Статистика статей

Статьи
53,084
Просмотры
249,703
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху