CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115946

    🚨 CVE-2026-115946 XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected...

  • CVE-2026-120243

    🚨 CVE-2026-120243 FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers...

  • CVE-2026-120244

    🚨 CVE-2026-120244 FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak...

  • CVE-2026-120245

    🚨 CVE-2026-120245 FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap...

  • CVE-2026-120247

    🚨 CVE-2026-120247 FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to...

  • CVE-2026-120248

    🚨 CVE-2026-120248 Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators...

  • CVE-2026-120249

    🚨 CVE-2026-120249 Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the...

  • CVE-2026-120250

    🚨 CVE-2026-120250 OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and...

  • CVE-2026-120251

    🚨 CVE-2026-120251 imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows...

  • CVE-2026-107342

    🚨 CVE-2026-107342 The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.30 does not perform a capability check when...

  • CVE-2026-13575

    🚨 CVE-2026-13575 HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in...

  • CVE-2026-120306

    🚨 CVE-2026-120306 Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build...

  • CVE-2026-120307

    🚨 CVE-2026-120307 The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's...

  • CVE-2026-120308

    🚨 CVE-2026-120308 A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by...

  • CVE-2026-117680

    🚨 CVE-2026-117680 Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv...

  • CVE-2026-120338

    🚨 CVE-2026-120338 Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno...

  • CVE-2026-74759

    🚨 CVE-2026-74759 Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external...

  • CVE-2026-74760

    🚨 CVE-2026-74760 Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth...

Статистика статей

Статьи
53,092
Просмотры
275,465
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху