CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123559

    🚨 CVE-2026-123559 Zebra before 7.0.0 contains an inefficient algorithmic complexity vulnerability that allows unauthenticated peers to exhaust...

  • CVE-2026-123560

    🚨 CVE-2026-123560 Zebra before 7.0.0 contains an incomplete cleanup vulnerability that allows unauthenticated peers to stall initial sync by...

  • CVE-2026-123561

    🚨 CVE-2026-123561 devalue before 5.9.3 allows malformed null-prototype object keys to bypass parse's __proto__ rejection through property-key...

  • CVE-2026-123562

    🚨 CVE-2026-123562 devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing...

  • CVE-2026-123563

    🚨 CVE-2026-123563 Devalue before 5.9.3 contains a validation bypass vulnerability that allows custom ArrayBuffer revivers to skip typed-array...

  • CVE-2026-123564

    🚨 CVE-2026-123564 Sveltejs devalue from 1.0.0 before 5.9.3 contains a memory exhaustion flaw in uneval, whose generated code for sparse arrays...

  • CVE-2026-123565

    🚨 CVE-2026-123565 Sveltejs devalue before 5.9.3 contains a resource exhaustion vulnerability where repeated primitive strings cause quadratic...

  • CVE-2026-123566

    🚨 CVE-2026-123566 Sveltejs devalue before 5.9.3 contains a denial of service vulnerability that allows attackers to cause CPU amplification by...

  • CVE-2026-123567

    🚨 CVE-2026-123567 Sveltejs devalue before 5.6.4 contains a prototype injection vulnerability that allows attackers to inject __proto__ own...

  • CVE-2026-123568

    🚨 CVE-2026-123568 Sveltejs devalue before 5.6.3 contains a prototype pollution vulnerability that allows attackers to alter object prototypes by...

  • CVE-2026-123569

    🚨 CVE-2026-123569 The devalue package for npm before 5.6.3 can consume excessive CPU and memory when serializing sparse arrays with uneval or...

  • CVE-2026-123570

    🚨 CVE-2026-123570 The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized by the...

  • CVE-2026-123571

    🚨 CVE-2026-123571 Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote...

  • CVE-2026-123573

    🚨 CVE-2026-123573 hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record...

  • CVE-2026-123574

    🚨 CVE-2026-123574 The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is...

  • CVE-2026-123575

    🚨 CVE-2026-123575 Hickory DNS before 0.26.2 contains a resource exhaustion vulnerability in its DNS-over-HTTPS HTTP/2 server that lacks sufficient...

  • CVE-2026-123576

    🚨 CVE-2026-123576 Hickory DNS 0.24.0 through 0.26.1 contains a memory exhaustion vulnerability that allows remote attackers to consume server...

  • CVE-2026-123577

    🚨 CVE-2026-123577 Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that allows remote attackers to consume...

Статистика статей

Статьи
53,082
Просмотры
218,839
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху