CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120207

    🚨 CVE-2026-120207 Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page...

  • CVE-2026-120208

    🚨 CVE-2026-120208 libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile()...

  • CVE-2026-120209

    🚨 CVE-2026-120209 AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline...

  • CVE-2026-120210

    🚨 CVE-2026-120210 FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside...

  • CVE-2026-70211

    🚨 CVE-2026-70211 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  • CVE-2026-83651

    🚨 CVE-2026-83651 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

  • CVE-2026-118147

    🚨 CVE-2026-118147 Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

  • CVE-2026-85908

    🚨 CVE-2026-85908 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  • CVE-2026-98432

    🚨 CVE-2026-98432 In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period...

  • CVE-2026-120135

    🚨 CVE-2026-120135 Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0...

  • CVE-2026-118636

    🚨 CVE-2026-118636 **UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on...

  • CVE-2026-120185

    🚨 CVE-2026-120185 A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file...

  • CVE-2026-115946

    🚨 CVE-2026-115946 XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected...

  • CVE-2025-2784

    🚨 CVE-2025-2784 A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the...

  • CVE-2025-32049

    🚨 CVE-2025-32049 A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to...

  • CVE-2025-32906

    🚨 CVE-2025-32906 A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw...

  • CVE-2025-32913

    🚨 CVE-2025-32913 A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer...

  • CVE-2025-32914

    🚨 CVE-2025-32914 A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This...

Статистика статей

Статьи
53,093
Просмотры
284,159
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху