CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-44266

    🚨 CVE-2026-44266 Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts...

  • CVE-2026-63499

    🚨 CVE-2026-63499 zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.1, ZipUtil.unpack(...) can...

  • CVE-2026-120673

    🚨 CVE-2026-120673 A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic...

  • CVE-2026-120678

    🚨 CVE-2026-120678 A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to hold on to...

  • CVE-2026-120684

    🚨 CVE-2026-120684 A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process memory...

  • CVE-2026-120953

    🚨 CVE-2026-120953 A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in...

  • CVE-2026-120954

    🚨 CVE-2026-120954 A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when...

  • CVE-2026-120955

    🚨 CVE-2026-120955 The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain error...

  • CVE-2026-120956

    🚨 CVE-2026-120956 The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a query response. A...

  • CVE-2026-121382

    🚨 CVE-2026-121382 A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function msg_aes_dec of the...

  • CVE-2026-63198

    🚨 CVE-2026-63198 traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, OAuth2 silent authorization requests using...

  • CVE-2025-71451

    🚨 CVE-2025-71451 Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in...

  • CVE-2025-71452

    🚨 CVE-2025-71452 Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in...

  • CVE-2026-105821

    🚨 CVE-2026-105821 The Tapo Cloud MQTT broker contains a broken access control vulnerability in a proxy topic used by authenticated Tapo devices to...

  • CVE-2026-105822

    🚨 CVE-2026-105822 The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a user-controlled host...

  • CVE-2026-110826

    🚨 CVE-2026-110826 Improper Session Invalidation after Authentication Credential Change vulnerability in team-alembic ash_authentication allows an...

  • CVE-2026-120567

    🚨 CVE-2026-120567 The MongoDB Entity Framework Core provider does not neutralize special elements when it places a caller-supplied value into a...

  • CVE-2026-121577

    🚨 CVE-2026-121577 Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.2.0...

Статистика статей

Статьи
53,091
Просмотры
267,014
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху