CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105601

    🚨 CVE-2026-105601 Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5

  • CVE-2026-105602

    🚨 CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

  • CVE-2026-74993

    🚨 CVE-2026-74993 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and...

  • CVE-2026-118052

    🚨 CVE-2026-118052 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing...

  • CVE-2026-109140

    🚨 CVE-2026-109140 The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every...

  • CVE-2026-109141

    🚨 CVE-2026-109141 The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that...

  • CVE-2026-109142

    🚨 CVE-2026-109142 When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RFC 6492...

  • CVE-2026-114408

    🚨 CVE-2026-114408 In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet...

  • CVE-2026-115653

    🚨 CVE-2026-115653 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted...

  • CVE-2026-115654

    🚨 CVE-2026-115654 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread...

  • CVE-2026-2102

    🚨 CVE-2026-2102 wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The...

  • CVE-2026-94290

    🚨 CVE-2026-94290 SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent on the...

  • CVE-2026-105769

    🚨 CVE-2026-105769 kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled...

  • CVE-2026-106803

    🚨 CVE-2026-106803 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted...

  • CVE-2026-106804

    🚨 CVE-2026-106804 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() function...

  • CVE-2026-106807

    🚨 CVE-2026-106807 A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or...

  • CVE-2026-119301

    🚨 CVE-2026-119301 Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for...

  • CVE-2026-120596

    🚨 CVE-2026-120596 A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in...

Статистика статей

Статьи
53,092
Просмотры
277,842
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху