CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-117614

    🚨 CVE-2026-117614 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers...

  • CVE-2026-118510

    🚨 CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of...

  • CVE-2026-83525

    🚨 CVE-2026-83525 Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before...

  • CVE-2026-58857

    🚨 CVE-2026-58857 In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code...

  • CVE-2026-58886

    🚨 CVE-2026-58886 In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could...

  • CVE-2026-120831

    🚨 CVE-2026-120831 A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and...

  • CVE-2026-121259

    🚨 CVE-2026-121259 A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or...

  • CVE-2026-120422

    🚨 CVE-2026-120422 Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component...

  • CVE-2026-100235

    🚨 CVE-2026-100235 Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of Apache...

  • CVE-2026-118513

    🚨 CVE-2026-118513 Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony versions prior to 5.4.56, 6.x...

  • CVE-2026-121144

    🚨 CVE-2026-121144 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of hardcoded service account...

  • CVE-2026-121145

    🚨 CVE-2026-121145 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficient validation of URLs and origins...

  • CVE-2026-121146

    🚨 CVE-2026-121146 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in...

  • CVE-2026-121147

    🚨 CVE-2026-121147 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper implementation of SSL certificate...

  • CVE-2026-118391

    🚨 CVE-2026-118391 Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker...

  • CVE-2026-100407

    🚨 CVE-2026-100407 Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store...

  • CVE-2026-121961

    🚨 CVE-2026-121961 FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc...

  • CVE-2026-121962

    🚨 CVE-2026-121962 FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User...

Статистика статей

Статьи
53,087
Просмотры
254,582
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху