CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2013-20008

    🚨 CVE-2013-20008 Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator...

  • CVE-2014-125138

    🚨 CVE-2014-125138 C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file...

  • CVE-2026-118273

    🚨 CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the...

  • CVE-2026-118370

    🚨 CVE-2026-118370 libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers...

  • CVE-2026-118374

    🚨 CVE-2026-118374 LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust...

  • CVE-2026-118378

    🚨 CVE-2026-118378 Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked...

  • CVE-2026-118276

    🚨 CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the...

  • CVE-2026-90719

    🚨 CVE-2026-90719 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0...

  • CVE-2026-90723

    🚨 CVE-2026-90723 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0...

  • CVE-2026-84725

    🚨 CVE-2026-84725 when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling...

  • CVE-2026-104310

    🚨 CVE-2026-104310 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a...

  • CVE-2026-77817

    🚨 CVE-2026-77817 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper...

  • CVE-2026-120306

    🚨 CVE-2026-120306 Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build...

  • CVE-2026-120307

    🚨 CVE-2026-120307 The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's...

  • CVE-2026-120308

    🚨 CVE-2026-120308 A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by...

  • CVE-2026-117680

    🚨 CVE-2026-117680 Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv...

  • CVE-2026-120338

    🚨 CVE-2026-120338 Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno...

  • CVE-2024-5617

    🚨 CVE-2024-5617 The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames...

Статистика статей

Статьи
53,092
Просмотры
275,465
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху