CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-47856

    🚨 CVE-2024-47856 In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has...

  • CVE-2024-5539

    🚨 CVE-2024-5539 The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a...

  • CVE-2024-32384

    🚨 CVE-2024-32384 Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support...

  • CVE-2024-32388

    🚨 CVE-2024-32388 Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets...

  • CVE-2024-2104

    🚨 CVE-2024-2104 Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write...

  • CVE-2024-14028

    🚨 CVE-2024-14028 Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects...

  • CVE-2024-36057

    🚨 CVE-2024-36057 Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution...

  • CVE-2024-36058

    🚨 CVE-2024-36058 The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to...

  • CVE-2024-1490

    🚨 CVE-2024-1490 An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface...

  • CVE-2024-23104

    🚨 CVE-2024-23104 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through...

  • CVE-2024-33618

    🚨 CVE-2024-33618 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts...

  • CVE-2024-53412

    🚨 CVE-2024-53412 Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell...

  • CVE-2024-2374

    🚨 CVE-2024-2374 The XML parsers within multiple WSO2 products accept user-supplied XML data without properly configuring to prevent the resolution...

  • CVE-2024-46636

    🚨 CVE-2024-46636 NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection...

  • CVE-2024-0391

    🚨 CVE-2024-0391 The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer...

  • CVE-2026-64231

    🚨 CVE-2026-64231 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On...

  • CVE-2026-64232

    🚨 CVE-2026-64232 In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in...

  • CVE-2026-64234

    🚨 CVE-2026-64234 In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent()...

Статистика статей

Статьи
53,082
Просмотры
216,320
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху