CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-94460

    🚨 CVE-2026-94460 IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges...

  • CVE-2026-95649

    🚨 CVE-2026-95649 IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can...

  • CVE-2026-12610

    🚨 CVE-2026-12610 A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free...

  • CVE-2026-102726

    🚨 CVE-2026-102726 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the PPP IPCP code parses a peer's Configure-Nak without...

  • CVE-2026-102723

    🚨 CVE-2026-102723 In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, the MSRP attribute lookup...

  • CVE-2026-102724

    🚨 CVE-2026-102724 In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, evicting the last attribute...

  • CVE-2026-102727

    🚨 CVE-2026-102727 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP server accepts the first connection to a passive data...

  • CVE-2026-102728

    🚨 CVE-2026-102728 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure TLS client's ServerHello parser and DTLS...

  • CVE-2026-12859

    🚨 CVE-2026-12859 Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality...

  • CVE-2026-86567

    🚨 CVE-2026-86567 A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading...

  • CVE-2026-86848

    🚨 CVE-2026-86848 A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index...

  • CVE-2026-100235

    🚨 CVE-2026-100235 Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of Apache...

  • CVE-2026-100252

    🚨 CVE-2026-100252 Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the server's...

  • CVE-2026-100300

    🚨 CVE-2026-100300 Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under...

  • CVE-2026-102725

    🚨 CVE-2026-102725 In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, the MSRP parser uses the...

  • CVE-2026-100302

    🚨 CVE-2026-100302 Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote...

  • CVE-2026-102703

    🚨 CVE-2026-102703 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]...

  • CVE-2026-102704

    🚨 CVE-2026-102704 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]...

Статистика статей

Статьи
53,088
Просмотры
263,320
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху