СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
25| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-27039 Detection of Error Condition Without Action in Computer Vision Qualcomm, Inc. / Snapdragon | Средний | 6.6 | 0,08 % | 09.10.2025 | ||
| CVE-2026-44310 gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers sigstore / gitsign | Высокий | 5.4 | 0,13 % | PoC | 15.05.2026 | |
| CVE-2026-114137 Django REST framework: TokenProxy.delete() reports success and revokes nothing encode / django-rest-framework · djangorestframework | Высокий | 7.4 | 0,51 % | 21.10.2026 | ||
| CVE-2025-26465 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled · Red Hat / Red Hat Enterprise Linux 8 | Высокий | 6.8 | 7,72 % | PoC | 18.02.2025 | |
| CVE-2026-43493 crypto: pcrypt - Fix handling of MAY_BACKLOG requests Linux / Linux · Siemens / SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | Критический | 9.8 | 0,68 % | 19.05.2026 | ||
| CVE-2026-111823 Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknow Mage / mage-ai | Критический | 9.8 | 0,56 % | 17.10.2026 | ||
| CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python) AWS / powertools-lambda-python | Средний | 6.0 | 0,31 % | Патч | 02.10.2026 | |
| CVE-2026-107275 @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed @fastify/jwt / @fastify/jwt | Средний | 6.8 | 0,31 % | 08.10.2026 | ||
| CVE-2026-104480 Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership Discord / libdave | Критический | 9.4 | 0,4 % | Патч | 02.10.2026 | |
| CVE-2026-85716 AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified AsyncHttpClient / async-http-client | Низкий | 3.7 | 0,41 % | 17.09.2026 | ||
| CVE-2026-29810 CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. CyberPanel / CyberPanel | Средний | 4.3 | 0,31 % | 13.09.2026 | ||
| CVE-2026-76642 util-linux libmount Privilege Escalation via Failed Mount Helper util-linux / util-linux | Критический | 8.5 | 0,22 % | PoCПатч | 03.09.2026 | |
| CVE-2026-59845 Libssh: libssh: denial of service via unchecked proxycommand fork() failure Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 8 | Средний | 5.3 | 0,1 % | 21.07.2026 | ||
| CVE-2026-52989 nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Linux / Linux · Red Hat / Red Hat Enterprise Linux 10 | Критический | 9.8 | 0,36 % | 24.06.2026 | ||
| CVE-2024-12086 Rsync: rsync server leaks arbitrary client files · Red Hat / Red Hat Enterprise Linux 10 | Высокий | 6.1 | 1,79 % | PoC | 14.01.2025 | |
| CVE-2026-53434 Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector Apache Software Foundation / Apache Tomcat | Критический | 9.1 | 0,59 % | 29.06.2026 | ||
| CVE-2026-48792 pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution mcdope / pam_usb | Средний | 4.4 | 0,13 % | 27.05.2026 | ||
| CVE-2024-49841 Detection of Error Condition Without Action in Hypervisor Qualcomm, Inc. / Snapdragon | Высокий | 7.8 | 0,11 % | 06.05.2025 | ||
| CVE-2025-46367 Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Dell / Alienware Command Center | Высокий | 7.8 | 0,14 % | 13.11.2025 | ||
| CVE-2025-0029 Improper handling of error condition during host-induced faults can allow a local high-privileged at AMD / AMD EPYC™ 9005 Series Processors · AMD / AMD EPYC™ Embedded 9005 Series Processors | Низкий | 1.8 | 0,13 % | 10.02.2026 | ||
| CVE-2024-30255 HTTP/2: CPU exhaustion due to CONTINUATION frame flood envoyproxy / envoy | Высокий | 5.3 | 87,81 % | 04.04.2024 | ||
| CVE-2024-27919 HTTP/2: memory exhaustion due to CONTINUATION frame flood envoyproxy / envoy | Критический | 7.5 | 86,75 % | 04.04.2024 | ||
| CVE-2025-25204 `gh attestation verify` returns incorrect exit code during verification if no attestations are present cli / cli | Средний | 6.3 | 0,41 % | 14.02.2025 | ||
| CVE-2024-11942 Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 Drupal / Drupal Core · drupal / drupal_core | Средний | 5.9 | 0,39 % | 05.12.2024 | ||
| CVE-2024-20316 A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an u Cisco / Cisco IOS XE Software · cisco / ios_xe | Средний | 5.8 | 0,45 % | 27.03.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.