CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-89059

    🚨 CVE-2026-89059 A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit...

  • CVE-2026-117679

    🚨 CVE-2026-117679 A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script...

  • CVE-2026-118869

    🚨 CVE-2026-118869 An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS...

  • CVE-2026-13423

    🚨 CVE-2026-13423 The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce verification on one of its unauthenticated...

  • CVE-2026-112257

    🚨 CVE-2026-112257 A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and...

  • CVE-2026-123036

    🚨 CVE-2026-123036 A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is censored before being emitted, but...

  • CVE-2023-5341

    🚨 CVE-2023-5341 A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

  • CVE-2026-27541

    🚨 CVE-2026-27541 Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation. This issue affects...

  • CVE-2026-27540

    🚨 CVE-2026-27540 Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows...

  • CVE-2026-103331

    🚨 CVE-2026-103331 The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not properly verify the authenticity of payment...

  • CVE-2026-27542

    🚨 CVE-2026-27542 Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege...

  • CVE-2023-5380

    🚨 CVE-2023-5380 A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a...

  • CVE-2023-6277

    🚨 CVE-2023-6277 An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a...

  • CVE-2023-5871

    🚨 CVE-2023-5871 A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard...

  • CVE-2023-5981

    🚨 CVE-2023-5981 A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times...

  • CVE-2023-6606

    🚨 CVE-2023-6606 An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could...

  • CVE-2023-6610

    🚨 CVE-2023-6610 An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could...

  • CVE-2023-6622

    🚨 CVE-2023-6622 A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux...

Статистика статей

Статьи
53,087
Просмотры
259,927
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху