CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-104720

    🚨 CVE-2026-104720 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and...

  • CVE-2026-123028

    🚨 CVE-2026-123028 A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of...

  • CVE-2026-81816

    🚨 CVE-2026-81816 XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-115739

    🚨 CVE-2026-115739 Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote...

  • CVE-2026-104867

    🚨 CVE-2026-104867 Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 until 3.2.0, the GET...

  • CVE-2026-110932

    🚨 CVE-2026-110932 A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution. The issue...

  • CVE-2026-114232

    🚨 CVE-2026-114232 A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which manages...

  • CVE-2026-119083

    🚨 CVE-2026-119083 Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted tar...

  • CVE-2026-120499

    🚨 CVE-2026-120499 h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by...

  • CVE-2026-121994

    🚨 CVE-2026-121994 A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute...

  • CVE-2026-121996

    🚨 CVE-2026-121996 A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized...

  • CVE-2026-121997

    🚨 CVE-2026-121997 A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code...

  • CVE-2026-49405

    🚨 CVE-2026-49405 OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local server...

  • CVE-2026-54142

    🚨 CVE-2026-54142 OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, background...

  • CVE-2026-75614

    🚨 CVE-2026-75614 ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWholeNumber in...

  • CVE-2026-82965

    🚨 CVE-2026-82965 A flaw was found in the SAML implementation of Keycloak, an open-source identity and access management solution. The SAML...

  • CVE-2026-107130

    🚨 CVE-2026-107130 Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

  • CVE-2026-54912

    🚨 CVE-2026-54912 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, the two-pass fast...

Статистика статей

Статьи
53,087
Просмотры
254,582
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху