CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91420

    🚨 CVE-2026-91420 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions...

  • CVE-2026-91421

    🚨 CVE-2026-91421 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions...

  • CVE-2026-91422

    🚨 CVE-2026-91422 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions...

  • CVE-2026-91423

    🚨 CVE-2026-91423 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions...

  • CVE-2026-92824

    🚨 CVE-2026-92824 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of...

  • CVE-2026-114406

    🚨 CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple...

  • CVE-2026-114635

    🚨 CVE-2026-114635 Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when...

  • CVE-2026-114639

    🚨 CVE-2026-114639 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated...

  • CVE-2026-114656

    🚨 CVE-2026-114656 Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip...

  • CVE-2026-115391

    🚨 CVE-2026-115391 Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3...

  • CVE-2026-115507

    🚨 CVE-2026-115507 Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go...

  • CVE-2026-115724

    🚨 CVE-2026-115724 VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content...

  • CVE-2026-116168

    🚨 CVE-2026-116168 SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an...

  • CVE-2026-116176

    🚨 CVE-2026-116176 vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound...

  • CVE-2026-116200

    🚨 CVE-2026-116200 Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force...

  • CVE-2026-116489

    🚨 CVE-2026-116489 Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to...

  • CVE-2026-112416

    🚨 CVE-2026-112416 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2...

  • CVE-2026-112441

    🚨 CVE-2026-112441 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2...

Статистика статей

Статьи
53,087
Просмотры
261,300
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху