CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-124308

    🚨 CVE-2026-124308 Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs because...

  • CVE-2026-124312

    🚨 CVE-2026-124312 Fraunhofer HHI VVdeC through 3.2.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash the decoder...

  • CVE-2026-124316

    🚨 CVE-2026-124316 Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted...

  • CVE-2026-124060

    🚨 CVE-2026-124060 A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...

  • CVE-2026-123494

    🚨 CVE-2026-123494 Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows attackers to import their data into a...

  • CVE-2026-123498

    🚨 CVE-2026-123498 Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to inject...

  • CVE-2026-123502

    🚨 CVE-2026-123502 Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because...

  • CVE-2026-123506

    🚨 CVE-2026-123506 Vikunja from 2.2.0 before 2.7.1 contains an authorization bypass vulnerability that allows holders of tokens scoped only to...

  • CVE-2026-123510

    🚨 CVE-2026-123510 Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load from and logs to be...

  • CVE-2026-123514

    🚨 CVE-2026-123514 Vikunja before 2.7.1 contains an improper resource cleanup vulnerability that leaves full-data export archives orphaned on disk...

  • CVE-2026-123522

    🚨 CVE-2026-123522 Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by...

  • CVE-2026-123526

    🚨 CVE-2026-123526 Vikunja before 2.7.1 contains a mass assignment vulnerability that allows any authenticated user to set the read-only...

  • CVE-2026-123534

    🚨 CVE-2026-123534 Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.static_url() and get_version() that allows...

  • CVE-2026-123538

    🚨 CVE-2026-123538 OpenAM before 16.1.4 does not verify that a signed SAML 1.x assertion or response was signed by the partner named as its issuer...

  • CVE-2026-123542

    🚨 CVE-2026-123542 OpenAM before 16.1.4 fails to enforce PKCE in the OAuth 2.0 device authorization flow, never validating the code verifier when...

  • CVE-2026-123546

    🚨 CVE-2026-123546 OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to control...

  • CVE-2026-123550

    🚨 CVE-2026-123550 OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned...

  • CVE-2026-123554

    🚨 CVE-2026-123554 Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because...

Статистика статей

Статьи
53,082
Просмотры
209,808
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху