CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-9908

    🚨 CVE-2025-9908 A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows...

  • CVE-2025-9909

    🚨 CVE-2025-9909 A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential...

  • CVE-2026-0964

    🚨 CVE-2026-0964 A malicious SCP server can send unexpected paths that could make the client application override local files outside of working...

  • CVE-2026-0966

    🚨 CVE-2026-0966 A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length...

  • CVE-2026-2271

    🚨 CVE-2026-2271 A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in...

  • CVE-2026-2272

    🚨 CVE-2026-2272 A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the...

  • CVE-2025-58713

    🚨 CVE-2025-58713 A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the...

  • CVE-2025-66286

    🚨 CVE-2025-66286 An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups...

  • CVE-2026-11611

    🚨 CVE-2026-11611 A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth...

  • CVE-2026-11785

    🚨 CVE-2026-11785 A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack...

  • CVE-2026-0716

    🚨 CVE-2026-0716 A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used...

  • CVE-2026-0990

    🚨 CVE-2026-0990 A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the...

  • CVE-2026-0810

    🚨 CVE-2026-0810 A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8...

  • CVE-2026-1467

    🚨 CVE-2026-1467 A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection...

  • CVE-2026-1489

    🚨 CVE-2026-1489 A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory...

  • CVE-2026-1536

    🚨 CVE-2026-1536 A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (Carriage...

  • CVE-2026-1539

    🚨 CVE-2026-1539 A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended...

  • CVE-2025-9907

    🚨 CVE-2025-9907 A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability...

Статистика статей

Статьи
53,087
Просмотры
255,260
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху