CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-44641

    🚨 CVE-2024-44641 PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.

  • CVE-2024-44657

    🚨 CVE-2024-44657 PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in...

  • CVE-2024-56089

    🚨 CVE-2024-56089 An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by...

  • CVE-2024-58317

    🚨 CVE-2024-58317 A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when setting...

  • CVE-2024-25812

    🚨 CVE-2024-25812 MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.

  • CVE-2024-40489

    🚨 CVE-2024-40489 There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers...

  • CVE-2024-43028

    🚨 CVE-2024-43028 A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute...

  • CVE-2024-7953

    🚨 CVE-2024-7953 A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for...

  • CVE-2024-42002

    🚨 CVE-2024-42002 A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool...

  • CVE-2024-58386

    🚨 CVE-2024-58386 ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users...

  • CVE-2024-58387

    🚨 CVE-2024-58387 Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows...

  • CVE-2024-58391

    🚨 CVE-2024-58391 Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview...

  • CVE-2024-58392

    🚨 CVE-2024-58392 PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read...

  • CVE-2026-86561

    🚨 CVE-2026-86561 A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which...

  • CVE-2026-93683

    🚨 CVE-2026-93683 A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length...

  • CVE-2026-100236

    🚨 CVE-2026-100236 A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the...

  • CVE-2026-86562

    🚨 CVE-2026-86562 A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with...

  • CVE-2026-86563

    🚨 CVE-2026-86563 A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.

Статистика статей

Статьи
53,082
Просмотры
213,519
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху