CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-107052

    🚨 CVE-2026-107052 Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to...

  • CVE-2026-107053

    🚨 CVE-2026-107053 Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and...

  • CVE-2026-107055

    🚨 CVE-2026-107055 Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write...

  • CVE-2026-107056

    🚨 CVE-2026-107056 Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized...

  • CVE-2026-107057

    🚨 CVE-2026-107057 An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

  • CVE-2026-107058

    🚨 CVE-2026-107058 An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's...

  • CVE-2026-118763

    🚨 CVE-2026-118763 sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts...

  • CVE-2026-118764

    🚨 CVE-2026-118764 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1...

  • CVE-2026-118765

    🚨 CVE-2026-118765 Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls...

  • CVE-2026-62374

    🚨 CVE-2026-62374 SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier...

  • CVE-2026-102260

    🚨 CVE-2026-102260 HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API endpoints...

  • CVE-2026-107347

    🚨 CVE-2026-107347 HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that...

  • CVE-2026-118766

    🚨 CVE-2026-118766 Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an...

  • CVE-2026-118767

    🚨 CVE-2026-118767 Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing...

  • CVE-2026-118768

    🚨 CVE-2026-118768 Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response from a...

  • CVE-2026-107049

    🚨 CVE-2026-107049 An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a...

  • CVE-2026-107050

    🚨 CVE-2026-107050 An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid...

  • CVE-2026-107051

    🚨 CVE-2026-107051 Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily...

Статистика статей

Статьи
53,101
Просмотры
286,096
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху