CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-106069

    🚨 CVE-2026-106069 A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than...

  • CVE-2026-115812

    🚨 CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow...

  • CVE-2026-115813

    🚨 CVE-2026-115813 Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow...

  • CVE-2026-115845

    🚨 CVE-2026-115845 An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an...

  • CVE-2026-19741

    🚨 CVE-2026-19741 Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modules/openthread/Kconfig.thread...

  • CVE-2026-79977

    🚨 CVE-2026-79977 The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In...

  • CVE-2026-79978

    🚨 CVE-2026-79978 The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps...

  • CVE-2026-79979

    🚨 CVE-2026-79979 The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mmu.c...

  • CVE-2026-79980

    🚨 CVE-2026-79980 The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as a counter...

  • CVE-2026-115975

    🚨 CVE-2026-115975 Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira...

  • CVE-2026-102801

    🚨 CVE-2026-102801 Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for...

  • CVE-2026-102802

    🚨 CVE-2026-102802 Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere...

  • CVE-2026-103419

    🚨 CVE-2026-103419 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.

  • CVE-2026-103420

    🚨 CVE-2026-103420 Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5

  • CVE-2026-105600

    🚨 CVE-2026-105600 Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5

  • CVE-2026-105601

    🚨 CVE-2026-105601 Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5

  • CVE-2026-105602

    🚨 CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

  • CVE-2026-109083

    🚨 CVE-2026-109083 Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can...

Статистика статей

Статьи
53,092
Просмотры
280,491
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху