CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-77878

    🚨 CVE-2026-77878 Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vulnerability in the loopback API database...

  • CVE-2026-77879

    🚨 CVE-2026-77879 Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication...

  • CVE-2026-77880

    🚨 CVE-2026-77880 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password...

  • CVE-2026-77881

    🚨 CVE-2026-77881 Control Web Panel (CWP) before webpanel_version 1.29 contains a blind SQL injection vulnerability in an unauthenticated loopback...

  • CVE-2026-119085

    🚨 CVE-2026-119085 Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering...

  • CVE-2026-28665

    🚨 CVE-2026-28665 In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input...

  • CVE-2026-49934

    🚨 CVE-2026-49934 In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation...

  • CVE-2026-55261

    🚨 CVE-2026-55261 In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission...

  • CVE-2026-55263

    🚨 CVE-2026-55263 In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to...

  • CVE-2026-58867

    🚨 CVE-2026-58867 In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could...

  • CVE-2026-121393

    🚨 CVE-2026-121393 FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients...

  • CVE-2026-121397

    🚨 CVE-2026-121397 FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malicious RDP servers...

  • CVE-2026-121401

    🚨 CVE-2026-121401 FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a...

  • CVE-2026-121417

    🚨 CVE-2026-121417 SurrealDB before 3.3.0 contains a use-after-free vulnerability in surrealdb-core KV backends that pass borrowed transaction...

  • CVE-2026-121421

    🚨 CVE-2026-121421 SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because...

  • CVE-2026-121425

    🚨 CVE-2026-121425 Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon inside...

  • CVE-2026-121429

    🚨 CVE-2026-121429 AzuraCast through 0.23.8 contains a command injection vulnerability that allows station users with Profile permission to execute...

  • CVE-2026-121433

    🚨 CVE-2026-121433 AzuraCast before 0.24.0 contains a stored CSV formula injection vulnerability that allows station users with Media permission to...

Статистика статей

Статьи
53,092
Просмотры
269,975
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху