CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-86565

    🚨 CVE-2026-86565 A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an...

  • CVE-2026-86566

    🚨 CVE-2026-86566 A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a...

  • CVE-2026-86567

    🚨 CVE-2026-86567 A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading...

  • CVE-2026-86845

    🚨 CVE-2026-86845 A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does...

  • CVE-2026-86846

    🚨 CVE-2026-86846 A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds...

  • CVE-2026-86847

    🚨 CVE-2026-86847 A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a...

  • CVE-2026-86848

    🚨 CVE-2026-86848 A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index...

  • CVE-2026-86849

    🚨 CVE-2026-86849 A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA...

  • CVE-2026-86856

    🚨 CVE-2026-86856 A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more...

  • CVE-2024-58398

    🚨 CVE-2024-58398 Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login...

  • CVE-2024-2323

    🚨 CVE-2024-2323 The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation...

  • CVE-2024-3586

    🚨 CVE-2024-3586 The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow high privilege...

  • CVE-2024-5617

    🚨 CVE-2024-5617 The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames...

  • CVE-2024-2372

    🚨 CVE-2024-2372 The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation...

  • CVE-2024-9517

    🚨 CVE-2024-9517 The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. This weakness...

  • CVE-2024-12141

    🚨 CVE-2024-12141 The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when processed...

  • CVE-2024-12139

    🚨 CVE-2024-12139 The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under specific...

  • CVE-2026-50240

    🚨 CVE-2026-50240 A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository custom resource...

Статистика статей

Статьи
53,082
Просмотры
213,519
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху