CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-95620

    🚨 CVE-2026-95620 A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious...

  • CVE-2026-50053

    🚨 CVE-2026-50053 A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* to...

  • CVE-2026-102786

    🚨 CVE-2026-102786 Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0...

  • CVE-2026-105481

    🚨 CVE-2026-105481 A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client...

  • CVE-2026-105482

    🚨 CVE-2026-105482 A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions...

  • CVE-2026-105483

    🚨 CVE-2026-105483 A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection...

  • CVE-2026-106070

    🚨 CVE-2026-106070 A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local...

  • CVE-2026-106071

    🚨 CVE-2026-106071 A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard...

  • CVE-2026-106072

    🚨 CVE-2026-106072 A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the...

  • CVE-2026-106073

    🚨 CVE-2026-106073 A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission...

  • CVE-2026-106074

    🚨 CVE-2026-106074 A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and...

  • CVE-2026-87901

    🚨 CVE-2026-87901 Improper sanitization in the registration module allows reflected Cross-Site Scripting.

  • CVE-2026-115572

    🚨 CVE-2026-115572 pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references...

  • CVE-2026-115585

    🚨 CVE-2026-115585 pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed...

  • CVE-2026-79982

    🚨 CVE-2026-79982 The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every...

  • CVE-2026-113877

    🚨 CVE-2026-113877 HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular...

  • CVE-2026-115938

    🚨 CVE-2026-115938 Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated...

  • CVE-2026-115931

    🚨 CVE-2026-115931 Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict...

Статистика статей

Статьи
53,092
Просмотры
279,491
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху