CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119741

    🚨 CVE-2026-119741 rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c that...

  • CVE-2026-120754

    🚨 CVE-2026-120754 HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. The...

  • CVE-2026-120755

    🚨 CVE-2026-120755 HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a...

  • CVE-2026-120756

    🚨 CVE-2026-120756 HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decoding...

  • CVE-2026-120757

    🚨 CVE-2026-120757 HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default...

  • CVE-2026-120758

    🚨 CVE-2026-120758 HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a...

  • CVE-2026-121450

    🚨 CVE-2026-121450 CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the...

  • CVE-2026-121451

    🚨 CVE-2026-121451 AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration...

  • CVE-2026-121454

    🚨 CVE-2026-121454 Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated...

  • CVE-2026-121544

    🚨 CVE-2026-121544 Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows...

  • CVE-2026-121545

    🚨 CVE-2026-121545 Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookRequestHandler::handleEvent that allows...

  • CVE-2026-121546

    🚨 CVE-2026-121546 ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape...

  • CVE-2026-121548

    🚨 CVE-2026-121548 Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute...

  • CVE-2026-121549

    🚨 CVE-2026-121549 nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to...

  • CVE-2026-121550

    🚨 CVE-2026-121550 nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main()...

  • CVE-2026-121551

    🚨 CVE-2026-121551 PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to...

  • CVE-2026-121552

    🚨 CVE-2026-121552 Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList handler that...

  • CVE-2026-121554

    🚨 CVE-2026-121554 cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to...

Статистика статей

Статьи
53,092
Просмотры
269,975
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху