CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-78402

    🚨 CVE-2026-78402 Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow...

  • CVE-2026-78403

    🚨 CVE-2026-78403 Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow...

  • CVE-2026-119338

    🚨 CVE-2026-119338 Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the...

  • CVE-2026-119339

    🚨 CVE-2026-119339 Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM...

  • CVE-2026-119340

    🚨 CVE-2026-119340 Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix...

  • CVE-2026-119341

    🚨 CVE-2026-119341 Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an...

  • CVE-2026-62991

    🚨 CVE-2026-62991 Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/customers/{user}/show` in...

  • CVE-2026-55612

    🚨 CVE-2026-55612 uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an invalid...

  • CVE-2026-63115

    🚨 CVE-2026-63115 ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handler allows...

  • CVE-2026-63201

    🚨 CVE-2026-63201 Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected versions, a...

  • CVE-2026-63402

    🚨 CVE-2026-63402 i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` checks...

  • CVE-2026-63414

    🚨 CVE-2026-63414 Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticated...

  • CVE-2026-114217

    🚨 CVE-2026-114217 A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext...

  • CVE-2026-116964

    🚨 CVE-2026-116964 A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the...

  • CVE-2026-117681

    🚨 CVE-2026-117681 A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically...

  • CVE-2026-120210

    🚨 CVE-2026-120210 FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside...

  • CVE-2026-118636

    🚨 CVE-2026-118636 **UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on...

  • CVE-2026-120135

    🚨 CVE-2026-120135 Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0...

Статистика статей

Статьи
53,092
Просмотры
276,402
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху