CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-52811

    🚨 CVE-2026-52811 Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on the...

  • CVE-2026-48946

    🚨 CVE-2026-48946 The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches...

  • CVE-2026-50014

    🚨 CVE-2026-50014 pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlled git resolution.commit value to git...

  • CVE-2026-50021

    🚨 CVE-2026-50021 pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's tarball extraction worker skips integrity verification when the...

  • CVE-2026-50573

    🚨 CVE-2026-50573 pnpm is a package manager. Prior to 10.34.0 and 11.4.0, `pnpm install` in non-frozen mode can accept new remote package content...

  • CVE-2026-57156

    🚨 CVE-2026-57156 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an...

  • CVE-2026-62196

    🚨 CVE-2026-62196 OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy...

  • CVE-2026-50354

    🚨 CVE-2026-50354 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  • CVE-2026-58279

    🚨 CVE-2026-58279 Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-50377

    🚨 CVE-2026-50377 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

  • CVE-2026-50447

    🚨 CVE-2026-50447 Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  • CVE-2026-55126

    🚨 CVE-2026-55126 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an...

  • CVE-2026-56649

    🚨 CVE-2026-56649 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows...

  • CVE-2026-42533

    🚨 CVE-2026-42533 A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression...

  • CVE-2026-15343

    🚨 CVE-2026-15343 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker with code execution inside a...

  • CVE-2026-58547

    🚨 CVE-2026-58547 Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.

  • CVE-2026-47015

    🚨 CVE-2026-47015 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). The...

  • CVE-2026-47026

    🚨 CVE-2026-47026 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported...

Статистика статей

Статьи
53,088
Просмотры
264,561
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху