CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-62968

    🚨 CVE-2026-62968 Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can...

  • CVE-2026-62979

    🚨 CVE-2026-62979 jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0...

  • CVE-2026-62989

    🚨 CVE-2026-62989 Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in...

  • CVE-2026-62990

    🚨 CVE-2026-62990 Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 and...

  • CVE-2026-62991

    🚨 CVE-2026-62991 Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/customers/{user}/show` in...

  • CVE-2026-58649

    🚨 CVE-2026-58649 Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

  • CVE-2026-64918

    🚨 CVE-2026-64918 Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

  • CVE-2026-62300

    🚨 CVE-2026-62300 Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up to and...

  • CVE-2026-62847

    🚨 CVE-2026-62847 Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19...

  • CVE-2026-62848

    🚨 CVE-2026-62848 Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25...

  • CVE-2026-62849

    🚨 CVE-2026-62849 ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS...

  • CVE-2026-62853

    🚨 CVE-2026-62853 ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied...

  • CVE-2026-62860

    🚨 CVE-2026-62860 Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the `/api/auth/login` endpoint reveals...

  • CVE-2026-62863

    🚨 CVE-2026-62863 MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse`...

  • CVE-2026-62864

    🚨 CVE-2026-62864 Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-nested-params` in...

  • CVE-2026-62958

    🚨 CVE-2026-62958 libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host...

  • CVE-2026-62966

    🚨 CVE-2026-62966 ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version...

  • CVE-2026-62967

    🚨 CVE-2026-62967 ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated...

Статистика статей

Статьи
53,098
Просмотры
285,102
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху