CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-5318

    🚨 CVE-2025-5318 A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle...

  • CVE-2025-5372

    🚨 CVE-2025-5372 A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible...

  • CVE-2025-5351

    🚨 CVE-2025-5351 A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting...

  • CVE-2025-4478

    🚨 CVE-2025-4478 A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation...

  • CVE-2025-5449

    🚨 CVE-2025-5449 A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check...

  • CVE-2025-4877

    🚨 CVE-2025-4877 There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

  • CVE-2025-4953

    🚨 CVE-2025-4953 A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is...

  • CVE-2025-54770

    🚨 CVE-2025-54770 A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service (DoS)...

  • CVE-2025-54771

    🚨 CVE-2025-54771 A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the...

  • CVE-2026-10805

    🚨 CVE-2026-10805 A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend...

  • CVE-2026-50623

    🚨 CVE-2026-50623 An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw'...

  • CVE-2026-50628

    🚨 CVE-2026-50628 A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing...

  • CVE-2026-50629

    🚨 CVE-2026-50629 The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without...

  • CVE-2026-50630

    🚨 CVE-2026-50630 A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response...

  • CVE-2026-50631

    🚨 CVE-2026-50631 A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Token to bypass single-use...

  • CVE-2026-50632

    🚨 CVE-2026-50632 A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache CXF has...

  • CVE-2026-50634

    🚨 CVE-2026-50634 A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not...

  • CVE-2026-50645

    🚨 CVE-2026-50645 There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху