CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120433

    🚨 CVE-2026-120433 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm...

  • CVE-2026-120434

    🚨 CVE-2026-120434 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's...

  • CVE-2026-120435

    🚨 CVE-2026-120435 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caused by an...

  • CVE-2026-120437

    🚨 CVE-2026-120437 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the...

  • CVE-2026-120438

    🚨 CVE-2026-120438 QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap...

  • CVE-2026-120439

    🚨 CVE-2026-120439 QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a...

  • CVE-2026-120440

    🚨 CVE-2026-120440 QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the...

  • CVE-2026-120441

    🚨 CVE-2026-120441 OwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that allows...

  • CVE-2026-120442

    🚨 CVE-2026-120442 ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-120443

    🚨 CVE-2026-120443 GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject...

  • CVE-2026-120444

    🚨 CVE-2026-120444 GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary...

  • CVE-2026-120445

    🚨 CVE-2026-120445 madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows...

  • CVE-2026-120446

    🚨 CVE-2026-120446 madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because...

  • CVE-2026-120447

    🚨 CVE-2026-120447 HotGo through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS...

  • CVE-2026-120448

    🚨 CVE-2026-120448 DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allows...

  • CVE-2026-120449

    🚨 CVE-2026-120449 Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to read unpublished...

  • CVE-2026-120450

    🚨 CVE-2026-120450 LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated users with read-only...

  • CVE-2026-120451

    🚨 CVE-2026-120451 libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow...

Статистика статей

Статьи
53,092
Просмотры
280,491
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху