CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-14476

    🚨 CVE-2026-14476 A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize ...

  • CVE-2026-14940

    🚨 CVE-2026-14940 A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN) that...

  • CVE-2026-14969

    🚨 CVE-2026-14969 A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for...

  • CVE-2026-15028

    🚨 CVE-2026-15028 A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially...

  • CVE-2026-12478

    🚨 CVE-2026-12478 The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving...

  • CVE-2026-15709

    🚨 CVE-2026-15709 A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression...

  • CVE-2026-15711

    🚨 CVE-2026-15711 A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules...

  • CVE-2026-15714

    🚨 CVE-2026-15714 An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the...

  • CVE-2026-16118

    🚨 CVE-2026-16118 A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the...

  • CVE-2026-15588

    🚨 CVE-2026-15588 A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth`...

  • CVE-2026-15813

    🚨 CVE-2026-15813 A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal...

  • CVE-2026-16277

    🚨 CVE-2026-16277 A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with `rpcinfo -l`...

  • CVE-2026-15370

    🚨 CVE-2026-15370 A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation...

  • CVE-2026-16461

    🚨 CVE-2026-16461 A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version...

  • CVE-2026-12548

    🚨 CVE-2026-12548 A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the...

  • CVE-2026-16473

    🚨 CVE-2026-16473 A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted audio...

  • CVE-2026-12353

    🚨 CVE-2026-12353 An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending...

  • CVE-2026-15003

    🚨 CVE-2026-15003 A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs...

Статистика статей

Статьи
53,087
Просмотры
255,260
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху