CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115929

    🚨 CVE-2026-115929 MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate...

  • CVE-2026-108013

    🚨 CVE-2026-108013 BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust...

  • CVE-2026-36698

    🚨 CVE-2026-36698 Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection...

  • CVE-2026-104597

    🚨 CVE-2026-104597 libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote...

  • CVE-2026-117535

    🚨 CVE-2026-117535 REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the...

  • CVE-2026-117539

    🚨 CVE-2026-117539 darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers...

  • CVE-2026-56084

    🚨 CVE-2026-56084 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80...

  • CVE-2026-117503

    🚨 CVE-2026-117503 A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of...

  • CVE-2026-117554

    🚨 CVE-2026-117554 Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event...

  • CVE-2026-117558

    🚨 CVE-2026-117558 The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute...

  • CVE-2026-117562

    🚨 CVE-2026-117562 rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories...

  • CVE-2026-117566

    🚨 CVE-2026-117566 EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and...

  • CVE-2026-117570

    🚨 CVE-2026-117570 Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities...

  • CVE-2026-117603

    🚨 CVE-2026-117603 Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious...

  • CVE-2026-107019

    🚨 CVE-2026-107019 Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized...

  • CVE-2026-107041

    🚨 CVE-2026-107041 Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers...

  • CVE-2026-51902

    🚨 CVE-2026-51902 SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint...

  • CVE-2026-51832

    🚨 CVE-2026-51832 An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local...

Статистика статей

Статьи
53,092
Просмотры
279,491
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху