CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121410

    🚨 CVE-2026-121410 FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to...

  • CVE-2026-121411

    🚨 CVE-2026-121411 FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT...

  • CVE-2026-121412

    🚨 CVE-2026-121412 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected...

  • CVE-2026-121413

    🚨 CVE-2026-121413 Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains an authorization bypass in the session upgrade endpoint...

  • CVE-2026-121414

    🚨 CVE-2026-121414 Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 fails to contain a serialization error when an object update uses a...

  • CVE-2026-121415

    🚨 CVE-2026-121415 Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 on MongoDB skips field type validation for null-valued dot notation...

  • CVE-2026-121417

    🚨 CVE-2026-121417 SurrealDB before 3.3.0 contains a use-after-free vulnerability in surrealdb-core KV backends that pass borrowed transaction...

  • CVE-2026-121418

    🚨 CVE-2026-121418 SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerability that allows record users to infer restricted...

  • CVE-2026-121419

    🚨 CVE-2026-121419 SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerprint uses...

  • CVE-2026-121420

    🚨 CVE-2026-121420 SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in the FilteringResolver is_private_ip...

  • CVE-2026-121421

    🚨 CVE-2026-121421 SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because...

  • CVE-2026-121422

    🚨 CVE-2026-121422 SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass...

  • CVE-2026-121423

    🚨 CVE-2026-121423 SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surreald...

  • CVE-2026-121424

    🚨 CVE-2026-121424 Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to...

  • CVE-2026-121425

    🚨 CVE-2026-121425 Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon inside...

  • CVE-2026-121426

    🚨 CVE-2026-121426 Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a '>'...

  • CVE-2026-121427

    🚨 CVE-2026-121427 AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for users lacking the...

  • CVE-2026-121428

    🚨 CVE-2026-121428 AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject...

Статистика статей

Статьи
53,092
Просмотры
271,555
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху