CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119285

    🚨 CVE-2026-119285 Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain...

  • CVE-2026-45049

    🚨 CVE-2026-45049 Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CDSSO`)...

  • CVE-2026-61673

    🚨 CVE-2026-61673 WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in...

  • CVE-2026-118947

    🚨 CVE-2026-118947 A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for...

  • CVE-2026-103963

    🚨 CVE-2026-103963 A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the...

  • CVE-2026-115455

    🚨 CVE-2026-115455 A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack...

  • CVE-2026-119146

    🚨 CVE-2026-119146 ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that...

  • CVE-2026-119372

    🚨 CVE-2026-119372 SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in...

  • CVE-2026-119407

    🚨 CVE-2026-119407 Element Web and Element Desktop before 1.12.32 accept guest credentials from URL fragment parameters in loadSession, allowing...

  • CVE-2026-117346

    🚨 CVE-2026-117346 Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

  • CVE-2025-49602

    🚨 CVE-2025-49602 An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid...

  • CVE-2026-110464

    🚨 CVE-2026-110464 Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location...

  • CVE-2026-112116

    🚨 CVE-2026-112116 An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read...

  • CVE-2026-121607

    🚨 CVE-2026-121607 A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command...

  • CVE-2026-121608

    🚨 CVE-2026-121608 A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function...

  • CVE-2026-121609

    🚨 CVE-2026-121609 A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file...

  • CVE-2026-121610

    🚨 CVE-2026-121610 A security flaw has been discovered in funadmin 7.1.0. Impacted is the function Curd::selectList of the file...

  • CVE-2026-84729

    🚨 CVE-2026-84729 Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended...

Статистика статей

Статьи
53,088
Просмотры
264,220
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху