CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-14260

    🚨 CVE-2025-14260 Due to the improper implementation of access control rules, malicious actors could perform a Server Side Request Forgery (SSRF)...

  • CVE-2026-114406

    🚨 CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple...

  • CVE-2026-114442

    🚨 CVE-2026-114442 Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP...

  • CVE-2026-110970

    🚨 CVE-2026-110971 Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it...

  • CVE-2026-110970

    🚨 CVE-2026-110972 Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server...

  • CVE-2026-119729

    🚨 CVE-2026-119729 A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a...

  • CVE-2026-119728

    🚨 CVE-2026-119728 A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with...

  • CVE-2026-119727

    🚨 CVE-2026-119727 A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing...

  • CVE-2026-119777

    🚨 CVE-2026-119777 A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an...

  • CVE-2026-120330

    🚨 CVE-2026-120330 Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested...

  • CVE-2026-77777

    🚨 CVE-2026-77777 ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated...

  • CVE-2026-120332

    🚨 CVE-2026-120332 The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail...

  • CVE-2026-77778

    🚨 CVE-2026-77778 ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other...

  • CVE-2026-89229

    🚨 CVE-2026-89229 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot...

  • CVE-2026-77691

    🚨 CVE-2026-77691 ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a...

  • CVE-2026-119843

    🚨 CVE-2026-119843 A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data...

  • CVE-2026-119724

    🚨 CVE-2026-119724 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')...

  • CVE-2026-120327

    🚨 CVE-2026-120327 The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to...

Статистика статей

Статьи
53,092
Просмотры
272,279
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху