CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-102590

    🚨 CVE-2026-102590 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a...

  • CVE-2026-104312

    🚨 CVE-2026-104312 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing...

  • CVE-2026-119120

    🚨 CVE-2026-119120 Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies...

  • CVE-2026-119124

    🚨 CVE-2026-119124 ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes...

  • CVE-2026-119128

    🚨 CVE-2026-119128 ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated...

  • CVE-2026-119132

    🚨 CVE-2026-119132 Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host...

  • CVE-2026-119140

    🚨 CVE-2026-119140 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious...

  • CVE-2026-77819

    🚨 CVE-2026-77819 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper...

  • CVE-2026-118764

    🚨 CVE-2026-118764 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and...

  • CVE-2026-119371

    🚨 CVE-2026-119371 SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH...

  • CVE-2026-119372

    🚨 CVE-2026-119372 SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in...

  • CVE-2026-119373

    🚨 CVE-2026-119373 SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer...

  • CVE-2026-119374

    🚨 CVE-2026-119374 SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past...

  • CVE-2026-119375

    🚨 CVE-2026-119375 SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache...

  • CVE-2026-119377

    🚨 CVE-2026-119377 SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the...

  • CVE-2026-119426

    🚨 CVE-2026-119426 phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbitrary...

  • CVE-2026-119427

    🚨 CVE-2026-119427 phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated users to...

  • CVE-2026-119428

    🚨 CVE-2026-119428 phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger...

Статистика статей

Статьи
53,092
Просмотры
271,010
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху