CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119672

    🚨 CVE-2026-119672 MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when --local is...

  • CVE-2026-119673

    🚨 CVE-2026-119673 MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for...

  • CVE-2026-119674

    🚨 CVE-2026-119674 MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name read from metadata when the...

  • CVE-2026-119675

    🚨 CVE-2026-119675 MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an...

  • CVE-2026-120843

    🚨 CVE-2026-120843 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Plugins Posts Table...

  • CVE-2026-120846

    🚨 CVE-2026-120846 Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured...

  • CVE-2026-121259

    🚨 CVE-2026-121259 A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or...

  • CVE-2026-121261

    🚨 CVE-2026-121261 A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::loadFromFile of the...

  • CVE-2026-121262

    🚨 CVE-2026-121262 A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file...

  • CVE-2026-121587

    🚨 CVE-2026-121587 Coolify before 4.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate...

  • CVE-2026-121588

    🚨 CVE-2026-121588 TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability that allows attackers to execute script...

  • CVE-2026-121603

    🚨 CVE-2026-121603 Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers to...

  • CVE-2026-121604

    🚨 CVE-2026-121604 wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that allows local...

  • CVE-2026-121631

    🚨 CVE-2026-121631 Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability in the RenameService that allows authenticated...

  • CVE-2026-28327

    🚨 CVE-2026-28327 SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and...

  • CVE-2026-28335

    🚨 CVE-2026-28335 SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution...

  • CVE-2026-28336

    🚨 CVE-2026-28336 SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the...

  • CVE-2026-38595

    🚨 CVE-2026-38595 An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a...

Статистика статей

Статьи
53,092
Просмотры
269,249
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху