CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-8418

    🚨 CVE-2024-8418 A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS...

  • CVE-2024-8445

    🚨 CVE-2024-8445 The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated...

  • CVE-2024-6840

    🚨 CVE-2024-6840 An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server...

  • CVE-2024-8775

    🚨 CVE-2024-8775 A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the...

  • CVE-2024-45769

    🚨 CVE-2024-45769 A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the...

  • CVE-2024-45770

    🚨 CVE-2024-45770 A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a...

  • CVE-2024-7259

    🚨 CVE-2024-7259 A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to...

  • CVE-2024-9341

    🚨 CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to...

  • CVE-2024-9407

    🚨 CVE-2024-9407 A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly...

  • CVE-2024-9671

    🚨 CVE-2024-9671 A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known...

  • CVE-2024-9979

    🚨 CVE-2024-9979 A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes...

  • CVE-2024-9676

    🚨 CVE-2024-9676 A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can...

  • CVE-2024-9902

    🚨 CVE-2024-9902 A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the...

  • CVE-2024-8676

    🚨 CVE-2024-8676 A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to...

  • CVE-2025-0306

    🚨 CVE-2025-0306 A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to...

  • CVE-2024-45774

    🚨 CVE-2024-45774 A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of...

  • CVE-2025-0622

    🚨 CVE-2025-0622 A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is...

  • CVE-2024-45776

    🚨 CVE-2024-45776 When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal...

Статистика статей

Статьи
53,087
Просмотры
258,367
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху