CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91272

    🚨 CVE-2026-91272 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported...

  • CVE-2026-91273

    🚨 CVE-2026-91273 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported...

  • CVE-2026-91274

    🚨 CVE-2026-91274 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC)...

  • CVE-2026-109618

    🚨 CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts...

  • CVE-2026-109619

    🚨 CVE-2026-109619 PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly...

  • CVE-2026-114715

    🚨 CVE-2026-114715 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa...

  • CVE-2026-114519

    🚨 CVE-2026-114519 Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a basic...

  • CVE-2026-114643

    🚨 CVE-2026-114643 The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members...

  • CVE-2026-114644

    🚨 CVE-2026-114644 The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of...

  • CVE-2026-114646

    🚨 CVE-2026-114646 A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an application...

  • CVE-2026-79872

    🚨 CVE-2026-79872 A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code...

  • CVE-2026-79874

    🚨 CVE-2026-79874 An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication...

  • CVE-2026-79885

    🚨 CVE-2026-79885 An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an...

  • CVE-2026-79886

    🚨 CVE-2026-79886 An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an...

  • CVE-2026-89419

    🚨 CVE-2026-89419 OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident}...

  • CVE-2026-55981

    🚨 CVE-2026-55981 A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware...

  • CVE-2026-113951

    🚨 CVE-2026-113951 If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in...

  • CVE-2026-115935

    🚨 CVE-2026-115935 The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user...

Статистика статей

Статьи
53,092
Просмотры
280,491
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху