CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-84243

    🚨 CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that...

  • CVE-2026-119117

    🚨 CVE-2026-119117 Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's...

  • CVE-2026-119728

    🚨 CVE-2026-119728 A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with...

  • CVE-2026-119729

    🚨 CVE-2026-119729 A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a...

  • CVE-2026-120007

    🚨 CVE-2026-120007 NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other...

  • CVE-2026-59978

    🚨 CVE-2026-59978 AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated...

  • CVE-2026-61845

    🚨 CVE-2026-61845 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts `CSS...

  • CVE-2026-62160

    🚨 CVE-2026-62160 Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` passes the...

  • CVE-2026-62331

    🚨 CVE-2026-62331 praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI...

  • CVE-2026-7003

    🚨 CVE-2026-7005 WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to...

  • CVE-2026-115828

    🚨 CVE-2026-115828 In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a...

  • CVE-2026-115829

    🚨 CVE-2026-115829 In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successfully...

  • CVE-2026-115830

    🚨 CVE-2026-115830 In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive...

  • CVE-2026-116239

    🚨 CVE-2026-116239 In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal...

  • CVE-2026-116240

    🚨 CVE-2026-116240 In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the...

  • CVE-2026-116241

    🚨 CVE-2026-116241 pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's...

  • CVE-2026-116242

    🚨 CVE-2026-116242 pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it...

  • CVE-2026-116243

    🚨 CVE-2026-116243 pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode...

Статистика статей

Статьи
53,098
Просмотры
285,102
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху