CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120752

    🚨 CVE-2026-120752 PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a...

  • CVE-2026-71450

    🚨 CVE-2026-71450 Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller...

  • CVE-2026-40895

    🚨 CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows...

  • CVE-2026-118662

    🚨 CVE-2026-118662 Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate...

  • CVE-2026-118666

    🚨 CVE-2026-118666 GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GraphQL...

  • CVE-2026-118682

    🚨 CVE-2026-118682 KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attackers...

  • CVE-2026-118692

    🚨 CVE-2026-118692 CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers to...

  • CVE-2026-118753

    🚨 CVE-2026-118753 FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in...

  • CVE-2026-118757

    🚨 CVE-2026-118757 PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerability in...

  • CVE-2026-120447

    🚨 CVE-2026-120447 HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the...

  • CVE-2026-120830

    🚨 CVE-2026-120830 A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response, the length of the quoted original...

  • CVE-2026-61567

    🚨 CVE-2026-61567 AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an...

  • CVE-2026-57448

    🚨 CVE-2026-57448 Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the...

  • CVE-2026-118577

    🚨 CVE-2026-118577 A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component...

  • CVE-2026-61571

    🚨 CVE-2026-61571 AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control and...

  • CVE-2026-118585

    🚨 CVE-2026-118585 A vulnerability was identified in configuroweb inventariobasico...

  • CVE-2026-79589

    🚨 CVE-2026-79589 The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain...

  • CVE-2026-107018

    🚨 CVE-2026-107018 Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write...

Статистика статей

Статьи
53,092
Просмотры
273,852
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху