CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-116887

    🚨 CVE-2026-116887 Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit...

  • CVE-2026-116890

    🚨 CVE-2026-116890 Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that...

  • CVE-2026-112350

    🚨 CVE-2026-112350 Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows...

  • CVE-2026-112351

    🚨 CVE-2026-112351 Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an...

  • CVE-2026-112352

    🚨 CVE-2026-112352 Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to...

  • CVE-2026-117082

    🚨 CVE-2026-117082 An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band...

  • CVE-2026-119738

    🚨 CVE-2026-119738 The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic...

  • CVE-2026-119739

    🚨 CVE-2026-119739 The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic...

  • CVE-2026-119740

    🚨 CVE-2026-119740 Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header...

  • CVE-2026-120689

    🚨 CVE-2026-120689 HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5B__iterate_helper() in src/H5B.c. When iterating a...

  • CVE-2026-105475

    🚨 CVE-2026-105475 Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

  • CVE-2026-105476

    🚨 CVE-2026-105476 Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and...

  • CVE-2026-16305

    🚨 CVE-2026-16305 Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a...

  • CVE-2026-29508

    🚨 CVE-2026-29508 ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows...

  • CVE-2026-120091

    🚨 CVE-2026-120091 Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and...

  • CVE-2026-120752

    🚨 CVE-2026-120752 PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a...

  • CVE-2026-71450

    🚨 CVE-2026-71450 Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller...

  • CVE-2026-105770

    🚨 CVE-2026-105770 Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to callers whose OIDC token does not satisfy...

Статистика статей

Статьи
53,092
Просмотры
269,975
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху