CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121554

    🚨 CVE-2026-121554 cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to...

  • CVE-2026-121555

    🚨 CVE-2026-121555 Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by...

  • CVE-2026-121556

    🚨 CVE-2026-121556 FastBee through 2.1.0 contains an insecure direct object reference vulnerability in ProductController that allows authenticated...

  • CVE-2026-121557

    🚨 CVE-2026-121557 WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send...

  • CVE-2026-121558

    🚨 CVE-2026-121558 AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that...

  • CVE-2026-121559

    🚨 CVE-2026-121559 GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows authenticated...

  • CVE-2026-121561

    🚨 CVE-2026-121561 Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows...

  • CVE-2026-121562

    🚨 CVE-2026-121562 CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes...

  • CVE-2026-121564

    🚨 CVE-2026-121564 Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from...

  • CVE-2026-121578

    🚨 CVE-2026-121578 Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields...

  • CVE-2026-65107

    🚨 CVE-2026-65107 NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission...

  • CVE-2026-65108

    🚨 CVE-2026-65108 NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running...

  • CVE-2026-65109

    🚨 CVE-2026-65109 NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files...

  • CVE-2026-65138

    🚨 CVE-2026-65138 NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate...

  • CVE-2026-65139

    🚨 CVE-2026-65139 NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.

  • CVE-2026-65140

    🚨 CVE-2026-65140 NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be...

  • CVE-2026-65165

    🚨 CVE-2026-65165 NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the...

  • CVE-2026-65168

    🚨 CVE-2026-65168 NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.

Статистика статей

Статьи
53,092
Просмотры
269,975
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху