CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120246

    🚨 CVE-2026-120246 FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into...

  • CVE-2026-120247

    🚨 CVE-2026-120247 FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to...

  • CVE-2026-120248

    🚨 CVE-2026-120248 Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators...

  • CVE-2026-120249

    🚨 CVE-2026-120249 Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the...

  • CVE-2026-120250

    🚨 CVE-2026-120250 OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and...

  • CVE-2026-120251

    🚨 CVE-2026-120251 imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows...

  • CVE-2026-120252

    🚨 CVE-2026-120252 imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define...

  • CVE-2026-15563

    🚨 CVE-2026-15563 A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an...

  • CVE-2026-120192

    🚨 CVE-2026-120192 A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of...

  • CVE-2023-39417

    🚨 CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or...

  • CVE-2026-120195

    🚨 CVE-2026-120195 A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function...

  • CVE-2026-120196

    🚨 CVE-2026-120196 A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi...

  • CVE-2026-120197

    🚨 CVE-2026-120197 A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi...

  • CVE-2026-120217

    🚨 CVE-2026-120217 A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file...

  • CVE-2026-120218

    🚨 CVE-2026-120218 A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file...

  • CVE-2026-7233

    🚨 CVE-2026-7233 A vulnerability was determined in Artifex MuPDF. The impacted element is the function fz_subset_cff_for_gids of the file...

  • CVE-2026-112887

    🚨 CVE-2026-112887 Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository...

  • CVE-2026-113429

    🚨 CVE-2026-113429 Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that is served...

Статистика статей

Статьи
53,093
Просмотры
284,159
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху