CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-117867

    🚨 CVE-2026-117867 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6...

  • CVE-2026-117868

    🚨 CVE-2026-117868 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

  • CVE-2026-117869

    🚨 CVE-2026-117869 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

  • CVE-2026-117870

    🚨 CVE-2026-117870 Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

  • CVE-2026-102812

    🚨 CVE-2026-102812 A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7...

  • CVE-2026-102813

    🚨 CVE-2026-102813 An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows...

  • CVE-2026-108308

    🚨 CVE-2026-108308 Tanium addressed a SQL injection vulnerability in Patch.

  • CVE-2026-108311

    🚨 CVE-2026-108311 Tanium addressed an insufficient logging vulnerability in Tanium Server.

  • CVE-2026-118132

    🚨 CVE-2026-118132 NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe...

  • CVE-2026-118170

    🚨 CVE-2026-118170 The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without...

  • CVE-2026-118171

    🚨 CVE-2026-118171 The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This...

  • CVE-2026-118172

    🚨 CVE-2026-118172 The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a webhook follow-redirect. The...

  • CVE-2026-118173

    🚨 CVE-2026-118173 MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required...

  • CVE-2026-118174

    🚨 CVE-2026-118174 When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to...

  • CVE-2026-118175

    🚨 CVE-2026-118175 When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message...

  • CVE-2026-118176

    🚨 CVE-2026-118176 Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using...

  • CVE-2026-118177

    🚨 CVE-2026-118177 When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird...

  • CVE-2026-118178

    🚨 CVE-2026-118178 A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to...

Статистика статей

Статьи
53,087
Просмотры
261,300
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху