CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91920

    🚨 CVE-2026-91920 A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in...

  • CVE-2026-104061

    🚨 CVE-2026-104061 Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader...

  • CVE-2026-104063

    🚨 CVE-2026-104063 Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import...

  • CVE-2026-104064

    🚨 CVE-2026-104064 Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader...

  • CVE-2026-104065

    🚨 CVE-2026-104065 Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw...

  • CVE-2026-104066

    🚨 CVE-2026-104066 Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and...

  • CVE-2026-104067

    🚨 CVE-2026-104067 Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that...

  • CVE-2026-119716

    🚨 CVE-2026-119716 pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows...

  • CVE-2026-119978

    🚨 CVE-2026-119978 Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing...

  • CVE-2026-119727

    🚨 CVE-2026-119727 A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing...

  • CVE-2026-114217

    🚨 CVE-2026-114217 A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext...

  • CVE-2026-116086

    🚨 CVE-2026-116086 A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information...

  • CVE-2026-116964

    🚨 CVE-2026-116964 A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the...

  • CVE-2026-117681

    🚨 CVE-2026-117681 A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically...

  • CVE-2026-109083

    🚨 CVE-2026-109083 Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can...

  • CVE-2026-110535

    🚨 CVE-2026-110535 Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure...

  • CVE-2026-113511

    🚨 CVE-2026-113511 Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a...

  • CVE-2026-113687

    🚨 CVE-2026-113687 Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for...

Статистика статей

Статьи
53,092
Просмотры
273,852
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху