CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-13647

    🚨 CVE-2025-13647 The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain...

  • CVE-2026-118871

    🚨 CVE-2026-118871 SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection...

  • CVE-2025-12544

    🚨 CVE-2025-12544 The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role to inject...

  • CVE-2024-2372

    🚨 CVE-2024-2372 The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation...

  • CVE-2026-18800

    🚨 CVE-2026-18800 When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products...

  • CVE-2024-9517

    🚨 CVE-2024-9517 The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. This weakness...

  • CVE-2026-2613

    🚨 CVE-2026-2613 The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of...

  • CVE-2026-20515

    🚨 CVE-2026-20515 In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User...

  • CVE-2026-20518

    🚨 CVE-2026-20518 In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information...

  • CVE-2026-20526

    🚨 CVE-2026-20526 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of...

  • CVE-2026-109553

    🚨 CVE-2026-109553 Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal...

  • CVE-2026-53995

    🚨 CVE-2026-53995 MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated...

  • CVE-2026-84579

    🚨 CVE-2026-84579 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe...

  • CVE-2026-55981

    🚨 CVE-2026-55981 A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware...

  • CVE-2026-115863

    🚨 CVE-2026-115863 ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c...

  • CVE-2026-115823

    🚨 CVE-2026-115823 Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive...

  • CVE-2026-115824

    🚨 CVE-2026-115824 Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked...

  • CVE-2026-115825

    🚨 CVE-2026-115825 HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large...

Статистика статей

Статьи
53,092
Просмотры
278,672
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху