CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-38600

    🚨 CVE-2026-38600 A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary...

  • CVE-2026-38601

    🚨 CVE-2026-38601 A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID...

  • CVE-2026-39743

    🚨 CVE-2026-39743 Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly...

  • CVE-2026-39777

    🚨 CVE-2026-39777 Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly...

  • CVE-2026-97072

    🚨 CVE-2026-97072 Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-109262

    🚨 CVE-2026-109262 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to...

  • CVE-2026-109263

    🚨 CVE-2026-109263 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated...

  • CVE-2026-109264

    🚨 CVE-2026-109264 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the...

  • CVE-2026-109265

    🚨 CVE-2026-109265 ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond...

  • CVE-2026-87361

    🚨 CVE-2026-87361 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported...

  • CVE-2026-104935

    🚨 CVE-2026-118527 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated...

  • CVE-2024-6538

    🚨 CVE-2024-6538 A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part...

  • CVE-2026-0980

    🚨 CVE-2026-0980 A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An...

  • CVE-2026-42015

    🚨 CVE-2026-42015 A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an...

  • CVE-2026-42014

    🚨 CVE-2026-42014 A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a...

  • CVE-2026-14324

    🚨 CVE-2026-14324 RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

  • CVE-2026-14330

    🚨 CVE-2026-14330 Multiple unbounded alloca() calls in the PulseAudio protocol server.

  • CVE-2026-64454

    🚨 CVE-2026-64454 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend...

Статистика статей

Статьи
53,092
Просмотры
269,249
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху