CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121963

    🚨 CVE-2026-121963 FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious...

  • CVE-2026-121971

    🚨 CVE-2026-121971 The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or...

  • CVE-2026-57853

    🚨 CVE-2026-57853 DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with...

  • CVE-2026-113780

    🚨 CVE-2026-113780 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esp_tee...

  • CVE-2026-122120

    🚨 CVE-2026-122120 In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios...

  • CVE-2026-122148

    🚨 CVE-2026-122148 In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An...

  • CVE-2026-82029

    🚨 CVE-2026-82029 Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-portal contacts to...

  • CVE-2025-71454

    🚨 CVE-2025-71454 vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/VteCsrf.php...

  • CVE-2026-109849

    🚨 CVE-2026-109849 Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the...

  • CVE-2026-109408

    🚨 CVE-2026-109408 vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three...

  • CVE-2026-112072

    🚨 CVE-2026-112072 vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that has...

  • CVE-2026-117679

    🚨 CVE-2026-117679 A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script...

  • CVE-2026-118869

    🚨 CVE-2026-118869 An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS...

  • CVE-2026-123036

    🚨 CVE-2026-123036 A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is censored before being emitted, but...

  • CVE-2026-73095

    🚨 CVE-2026-73095 Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST...

  • CVE-2026-73098

    🚨 CVE-2026-73098 Improper control of dynamically-loaded code vulnerability in Apache Juneau. When Apache Juneau parses a value into a property of...

  • CVE-2026-73099

    🚨 CVE-2026-73099 Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that...

  • CVE-2026-123047

    🚨 CVE-2026-123047 In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled Keycloak enabled...

Статистика статей

Статьи
53,087
Просмотры
254,582
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху