CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2022-3134

    🚨 CVE-2022-3134 Use After Free in GitHub repository vim/vim prior to 9.0.0389.

  • CVE-2022-3153

    🚨 CVE-2022-3153 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

  • CVE-2022-2905

    🚨 CVE-2022-2905 An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function...

  • CVE-2022-3235

    🚨 CVE-2022-3235 Use After Free in GitHub repository vim/vim prior to 9.0.0490.

  • CVE-2025-69820

    🚨 CVE-2025-69820 Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via the...

  • CVE-2026-34121

    🚨 CVE-2026-34121 An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 and...

  • CVE-2026-11332

    🚨 CVE-2026-11332 A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's...

  • CVE-2026-111555

    🚨 CVE-2026-111555 A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or...

  • CVE-2026-113440

    🚨 CVE-2026-113440 Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain the...

  • CVE-2026-115721

    🚨 CVE-2026-115721 **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory...

  • CVE-2026-115748

    🚨 CVE-2026-115748 **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server...

  • CVE-2026-85297

    🚨 CVE-2026-85297 Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and...

  • CVE-2026-115418

    🚨 CVE-2026-115418 SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK)...

  • CVE-2026-65627

    🚨 CVE-2026-65627 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote...

  • CVE-2026-65628

    🚨 CVE-2026-65628 jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. Its first...

  • CVE-2026-65629

    🚨 CVE-2026-65629 Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a...

  • CVE-2026-65630

    🚨 CVE-2026-65630 Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a...

  • CVE-2026-65632

    🚨 CVE-2026-65632 The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifying an...

Статистика статей

Статьи
53,092
Просмотры
273,852
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху