CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-103653

    🚨 CVE-2026-103653 An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP...

  • CVE-2026-120988

    🚨 CVE-2026-120988 billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during...

  • CVE-2026-13594

    🚨 CVE-2026-13594 Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow...

  • CVE-2026-16900

    🚨 CVE-2026-16900 Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local...

  • CVE-2026-4052

    🚨 CVE-2026-4052 This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In...

  • CVE-2026-74846

    🚨 CVE-2026-74846 Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in...

  • CVE-2026-42012

    🚨 CVE-2026-42012 A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...

  • CVE-2026-14324

    🚨 CVE-2026-14324 RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

  • CVE-2026-14330

    🚨 CVE-2026-14330 Multiple unbounded alloca() calls in the PulseAudio protocol server.

  • CVE-2026-105979

    🚨 CVE-2026-105979 Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system...

  • CVE-2026-105981

    🚨 CVE-2026-105981 Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating...

  • CVE-2026-105982

    🚨 CVE-2026-105982 Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands...

  • CVE-2026-109161

    🚨 CVE-2026-109161 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of...

  • CVE-2026-113421

    🚨 CVE-2026-113421 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback...

  • CVE-2026-115231

    🚨 CVE-2026-115231 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a...

  • CVE-2026-118444

    🚨 CVE-2026-118444 Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent process memory during instruction...

  • CVE-2026-118445

    🚨 CVE-2026-118445 A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. These...

  • CVE-2026-118446

    🚨 CVE-2026-118446 A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, including...

Статистика статей

Статьи
53,092
Просмотры
272,279
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху