CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115740

    🚨 CVE-2026-115740 Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file...

  • CVE-2026-119344

    🚨 CVE-2026-119344 Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment...

  • CVE-2026-119345

    🚨 CVE-2026-119345 Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS...

  • CVE-2026-119751

    🚨 CVE-2026-119751 Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated...

  • CVE-2026-121139

    🚨 CVE-2026-121139 The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated...

  • CVE-2026-122317

    🚨 CVE-2026-122317 SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's...

  • CVE-2026-122324

    🚨 CVE-2026-122324 SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users'...

  • CVE-2026-122326

    🚨 CVE-2026-122326 Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that...

  • CVE-2026-122327

    🚨 CVE-2026-122327 Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify shared...

  • CVE-2026-122328

    🚨 CVE-2026-122328 SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when...

  • CVE-2026-122329

    🚨 CVE-2026-122329 SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated...

  • CVE-2026-122330

    🚨 CVE-2026-122330 Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that...

  • CVE-2026-123094

    🚨 CVE-2026-123094 Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped...

  • CVE-2026-123095

    🚨 CVE-2026-123095 mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote...

  • CVE-2026-123096

    🚨 CVE-2026-123096 anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker/http package that allows malicious...

  • CVE-2026-123125

    🚨 CVE-2026-123125 The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip...

  • CVE-2026-123158

    🚨 CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication...

  • CVE-2026-61813

    🚨 CVE-2026-61813 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15...

Статистика статей

Статьи
53,087
Просмотры
256,406
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху