СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2023-25815 In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. A git_for_windows_project / git_for_windows · fedoraproject / fedora | Низкий | 2.2 | — | Патч | 25.04.2023 | |
| CVE-2026-120059 psqlODBC uses a server-supplied column name as a format string PostgreSQL / psqlODBC | Средний | 6.8 | — | 02.11.2026 | ||
| CVE-2026-63201 netopeer2-server logging has format string vulnerability via subtree filter CESNET / netopeer2 | Высокий | 7.1 | 0,43 % | 31.10.2026 | ||
| CVE-2026-15809 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env Red Hat / Red Hat OpenShift Container Platform 4.12 · Red Hat / Red Hat OpenShift Container Platform 4.13 | Высокий | 7.8 | 0,18 % | 15.07.2026 | ||
| CVE-2026-94520 Microsoft SQL Server Denial of Service Vulnerability Microsoft / Microsoft SQL Server 2017 (GDR) · Microsoft / Microsoft SQL Server 2017 for x64-based Systems (CU31) | Средний | 4.9 | 0,84 % | Патч | 13.10.2026 | |
| CVE-2026-83585 Windows NTFS Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,35 % | Патч | 13.10.2026 | |
| CVE-2026-85842 Windows Image Acquisition Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 21H2 · Microsoft / Windows 10 Version 22H2 | Высокий | 7.8 | 0,31 % | Патч | 13.10.2026 | |
| CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 6.5 | 1 % | Патч | 08.09.2026 | |
| CVE-2024-58366 SurrealDB before 1.1.1 Format String via Scripting Functions surrealdb / surrealdb · DelSkayn / rquickjs | Критический | 9.0 | 0,58 % | 18.07.2026 | ||
| CVE-2023-23783 A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, Forti fortinet / fortiweb | Высокий | 7.8 | 0,25 % | 16.02.2023 | ||
| CVE-2026-17136 Vulnerabilities in IBM AIX and PowerVM VIOS IBM / AIX · IBM / PowerVM VIOS | Критический | 9.8 | 0,8 % | Патч | 21.08.2026 | |
| CVE-2026-44407 Remote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartview ZTE / ZXCLOUD iRAI · zte / zxcloud_irai | Высокий | 7.5 | 0,27 % | 07.05.2026 | ||
| CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Средний | 5.5 | 0,11 % | 22.04.2026 | ||
| CVE-2025-68816 net/mlx5: fw_tracer, Validate format string parameters Linux / Linux · Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | Информационный | — | 0,24 % | 13.01.2026 | ||
| CVE-2026-84691 Automation-controller: automation-controller-container: automation-controller: format string injection in the api 4xx error log setting discloses django secret_key and database credentials to an administrator Red Hat / Red Hat Ansible Automation Platform 2.5 for RHEL 8 · Red Hat / Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Высокий | 8.7 | 0,2 % | 23.09.2026 | ||
| CVE-2026-45452 Unitronics - CWE-134 Use of Externally-Controlled format string Unitronics / Unitronics UniStream Pro/UniLogic | Высокий | 8.3 | 0,27 % | 15.10.2026 | ||
| CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used Juniper Networks / Junos OS | Критический | 9.2 | 0,41 % | 14.10.2026 | ||
| CVE-2026-101965 Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled Juniper Networks / Junos OS Evolved | Высокий | 8.7 | 0,6 % | 14.10.2026 | ||
| CVE-2024-35845 wifi: iwlwifi: dbg-tlv: ensure NUL termination Linux / Linux · linux / linux_kernel | Критический | 9.1 | 1,17 % | 17.05.2024 | ||
| CVE-2026-101966 Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service Juniper Networks / Junos OS Evolved | Высокий | 8.8 | 0,43 % | 14.10.2026 | ||
| CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM) | Критический | 9.8 | 0,53 % | 06.10.2026 | ||
| CVE-2026-14157 Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticate ASUS / Router | Критический | 9.4 | 0,76 % | 01.10.2026 | ||
| CVE-2026-47494 NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a f NVIDIA / GeForce · NVIDIA / RTX, Quadro, NVS | Высокий | 7.8 | 0,15 % | 30.09.2026 | ||
| CVE-2026-76729 Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint Hewlett Packard Enterprise (HPE) / Instant ON | Средний | 6.6 | 0,42 % | 29.09.2026 | ||
| CVE-2026-76722 Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs Hewlett Packard Enterprise (HPE) / Instant ON | Критический | 9.8 | 0,54 % | 29.09.2026 | ||
| CVE-2026-18461 Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. RTI / Connext Professional | Критический | 9.2 | 0,33 % | 22.09.2026 | ||
| CVE-2026-73782 Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX Hewlett Packard Enterprise (HPE) / AOS-CX | Высокий | 8.8 | 0,42 % | 01.09.2026 | ||
| CVE-2026-6390 Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Средний | 6.8 | 0,15 % | 23.07.2026 | ||
| CVE-2026-16821 Vulnerabilities in IBM AIX and PowerVM VIOS IBM / AIX · IBM / PowerVM VIOS | Высокий | 7.0 | 0,13 % | Патч | 28.08.2026 | |
| CVE-2026-63073 Untrusted Sender DN Used as Format String in CMP Response Validation OpenSSL / OpenSSL | Критический | 9.8 | 1,16 % | Патч | 25.08.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.