СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-115946 XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder Продукт уточняется | Информационный | — | 0,24 % | 01.11.2026 | ||
| CVE-2026-69713 Windows Secure Boot Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 4.4 | 0,35 % | Патч | 08.09.2026 | |
| CVE-2026-117611 Trust of compromised eMudhra root CA in bundled CA stores Checkmk GmbH / Checkmk | Высокий | 7.1 | 0,24 % | 29.10.2026 | ||
| CVE-2026-114113 Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders lovell / sharp · sharp | Высокий | 8.4 | 0,11 % | 21.10.2026 | ||
| CVE-2026-34654 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) Adobe / Adobe Commerce · Adobe / Adobe Commerce B2B | Средний | 5.3 | 0,62 % | 12.05.2026 | ||
| CVE-2026-34652 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) Adobe / Adobe Commerce · Adobe / Adobe Commerce B2B | Высокий | 7.5 | 0,51 % | 12.05.2026 | ||
| CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images TryGhost / Ghost · ghost | Высокий | 8.8 | 0,27 % | 05.10.2026 | ||
| CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm CISA / Malcolm | Средний | 6.3 | 0,2 % | 12.09.2026 | ||
| CVE-2026-100242 DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion) Wikimedia Foundation / Mediawiki - DataTransfer Extension | Критический | 7.5 | 0,41 % | PoC | 29.09.2026 | |
| CVE-2026-47906 Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395) Adobe / Dreamweaver Desktop | Высокий | 8.6 | 0,18 % | 09.06.2026 | ||
| CVE-2026-58235 Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) SAP_SE / SAP NetWeaver AS Java (Adobe Document Services) | Средний | 6.3 | 0,3 % | 11.08.2026 | ||
| CVE-2026-58586 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp ZAPAD / Image::WebP | Критический | 9.8 | 0,65 % | 24.07.2026 | ||
| CVE-2026-16634 TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99 FELIPE / TOML::XS | Критический | 9.8 | 0,82 % | PoC | 24.07.2026 | |
| CVE-2026-60455 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (componen Oracle Corporation / Oracle Platform Security for Java | Высокий | 8.8 | 0,43 % | 23.07.2026 | ||
| CVE-2026-55789 Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providers logto-io / logto | Критический | 8.5 | 0,34 % | PoC | 10.07.2026 | |
| CVE-2025-61587 Weblate integration with Anubis can lead to Open Redirect via redir parameter WeblateOrg / weblate · weblate | Средний | 2.1 | 0,39 % | PoCПатч | 02.10.2025 | |
| CVE-2024-38526 pdoc embeds link to malicious CDN if math mode is enabled mitmproxy / pdoc · pdoc | Информационный | 0.0 | 3,83 % | 26.06.2024 | ||
| CVE-2026-23654 GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability Microsoft / GitHub Repo: Zero Shot scFoundation | Высокий | 8.8 | 0,97 % | Патч | 10.03.2026 | |
| CVE-2024-42206 HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application. HCL / iReflection | Низкий | 3.1 | 0,15 % | 02.06.2026 | ||
| CVE-2026-8993 Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks Ditec a.s. / D.Launcher 2 | Средний | 6.5 | 0,23 % | 02.06.2026 | ||
| CVE-2025-31973 HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version' HCL / BigFix Service Management (SM) | Средний | 4.0 | 0,18 % | 20.05.2026 | ||
| CVE-2025-34203 Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components Vasion / Print Virtual Appliance Host · Vasion / Print Application | Критический | 9.3 | 0,87 % | Патч | 19.09.2025 | |
| CVE-2025-11159 Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component Hitachi Vantara / Pentaho Data Integration and Analytics | Критический | 9.1 | 0,34 % | 13.05.2026 | ||
| CVE-2025-59851 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability HCL / DFXAnalytics | Низкий | 3.7 | 0,21 % | 06.05.2026 | ||
| CVE-2025-15638 Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt ATRODO / Net::Dropbear | Критический | 10.0 | 0,57 % | 21.04.2026 | ||
| CVE-2024-14031 Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library YVES / Sereal::Encoder | Высокий | 8.1 | 0,36 % | 31.03.2026 | ||
| CVE-2024-14030 Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library YVES / Sereal::Decoder | Высокий | 8.1 | 0,36 % | 31.03.2026 | ||
| CVE-2026-4176 Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib SHAY / perl | Критический | 9.8 | 0,74 % | Патч | 29.03.2026 | |
| CVE-2026-3381 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib PMQS / Compress::Raw::Zlib | Критический | 9.8 | 0,62 % | 05.03.2026 | ||
| CVE-2026-3257 UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library TOKUHIROM / UnQLite | Критический | 9.8 | 0,46 % | 05.03.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.