CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-70382

    🚨 CVE-2026-70382 Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An...

  • CVE-2026-112545

    🚨 CVE-2026-112545 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS...

  • CVE-2026-116671

    🚨 CVE-2026-116671 Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.

  • CVE-2026-103310

    🚨 CVE-2026-103310 The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications...

  • CVE-2026-55262

    🚨 CVE-2026-55262 In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy...

  • CVE-2026-105476

    🚨 CVE-2026-105476 Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and...

  • CVE-2026-116768

    🚨 CVE-2026-116768 CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers...

  • CVE-2026-58873

    🚨 CVE-2026-58873 In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check...

  • CVE-2026-115215

    🚨 CVE-2026-115215 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed...

  • CVE-2026-115403

    🚨 CVE-2026-115403 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send...

  • CVE-2026-116635

    🚨 CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server...

  • CVE-2026-120091

    🚨 CVE-2026-120091 Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and...

  • CVE-2026-120740

    🚨 CVE-2026-120740 A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds...

  • CVE-2026-86596

    🚨 CVE-2026-86596 The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the...

  • CVE-2022-34717

    🚨 CVE-2022-34717 Microsoft Office Remote Code Execution Vulnerability

  • CVE-2022-38533

    🚨 CVE-2022-38533 In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main...

  • CVE-2022-36280

    🚨 CVE-2022-36280 An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component...

  • CVE-2022-40755

    🚨 CVE-2022-40755 JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.

Статистика статей

Статьи
53,092
Просмотры
273,852
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху