CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-11770

    🚨 CVE-2026-11770 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV...

  • CVE-2026-14180

    🚨 CVE-2026-14180 A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle...

  • CVE-2026-11861

    🚨 CVE-2026-11861 A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users...

  • CVE-2026-11873

    🚨 CVE-2026-11873 An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack...

  • CVE-2026-102010

    🚨 CVE-2026-102010 A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the...

  • CVE-2026-102473

    🚨 CVE-2026-102473 A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbounded recursion...

  • CVE-2026-102474

    🚨 CVE-2026-102474 A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte...

  • CVE-2026-109833

    🚨 CVE-2026-109833 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption...

  • CVE-2026-100231

    🚨 CVE-2026-100231 A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing...

  • CVE-2026-109969

    🚨 CVE-2026-109969 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without...

  • CVE-2026-109971

    🚨 CVE-2026-109971 A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line...

  • CVE-2026-109968

    🚨 CVE-2026-109968 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases...

  • CVE-2026-110777

    🚨 CVE-2026-110777 A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read...

  • CVE-2026-111555

    🚨 CVE-2026-111555 A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or...

  • CVE-2026-112214

    🚨 CVE-2026-112214 A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled...

  • CVE-2026-112259

    🚨 CVE-2026-112259 A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference...

  • CVE-2026-113495

    🚨 CVE-2026-113495 A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line...

  • CVE-2026-113496

    🚨 CVE-2026-113496 A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is...

Статистика статей

Статьи
53,087
Просмотры
255,260
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху