СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime Go standard library / mime | Высокий | 7.5 | 0,56 % | 03.06.2026 | ||
| CVE-2026-49293 CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals sunnyadn / js-toml · js-toml | Критический | 7.5 | 0,64 % | PoCПатч | 19.06.2026 | |
| CVE-2026-119196 pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding pyasn1 / pyasn1 · pyasn1 | Критический | 7.5 | 0,43 % | PoCПатч | 29.10.2026 | |
| CVE-2026-116872 Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters SemanticMediaWiki / SemanticMediaWiki · semantic-mediawiki / semantic_mediawiki | Критический | 8.7 | 0,35 % | PoCПатч | 27.10.2026 | |
| CVE-2026-119741 rsync through 3.5.1 Denial of Service via hash_search() Checksum Collisions RsyncProject / rsync · samba / rsync | Высокий | 8.7 | — | Патч | 03.11.2026 | |
| CVE-2026-65631 erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service potatosalad / jose | Средний | 6.9 | 0,24 % | Патч | 26.10.2026 | |
| CVE-2026-121437 Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters lepture / mistune | Критический | 8.7 | — | PoCПатч | 03.11.2026 | |
| CVE-2026-119194 pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding pyasn1 / pyasn1 · pyasn1 | Критический | 7.5 | 0,43 % | PoCПатч | 29.10.2026 | |
| CVE-2019-25781 Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerability in inline... Продукт уточняется | Высокий | 8.7 | 0,42 % | 29.10.2026 | ||
| CVE-2026-116795 RE2JS: Quadratic-time denial of service in re2js lookbehind matching le0pard / re2js · re2js | Критический | 7.5 | 0,47 % | PoCПатч | 28.10.2026 | |
| CVE-2026-117540 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop darylldoyle / svg-sanitizer | Критический | 8.7 | 0,35 % | PoCПатч | 27.10.2026 | |
| CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields py-pdf / pypdf · pypdf | Средний | 6.0 | 0,32 % | Патч | 21.10.2026 | |
| CVE-2026-82398 pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace py-pdf / pypdf · pypdf | Средний | 6.9 | 0,52 % | Патч | 01.09.2026 | |
| CVE-2026-49460 pypdf: Inefficient decoding of FlateDecode PNG predictor streams py-pdf / pypdf · pypdf | Средний | 5.1 | 0,17 % | Патч | 22.06.2026 | |
| CVE-2026-33123 pypdf has inefficient decoding of array-based streams py-pdf / pypdf · pypdf | Средний | 5.1 | 0,36 % | Патч | 20.03.2026 | |
| CVE-2026-28804 pypdf: Inefficient decoding of ASCIIHexDecode streams py-pdf / pypdf · pypdf | Средний | 6.9 | 0,44 % | Патч | 06.03.2026 | |
| CVE-2026-115585 pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) py-pdf / pypdf · pypdf | Высокий | 7.1 | 0,41 % | 23.10.2026 | ||
| CVE-2026-102999 pypdf: Possible long runtimes with large amount of embedded files py-pdf / pypdf · pypdf | Высокий | 8.7 | 0,35 % | Патч | 30.09.2026 | |
| CVE-2026-102997 pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) py-pdf / pypdf · pypdf | Высокий | 8.7 | 0,34 % | Патч | 30.09.2026 | |
| CVE-2026-102994 pypdf: Possible long runtimes/large memory usage when parsing indirect objects py-pdf / pypdf · pypdf | Высокий | 8.7 | 0,34 % | Патч | 30.09.2026 | |
| CVE-2023-36810 PyPDF2 quadratic runtime with malformed PDF missing xref marker py-pdf / pypdf · pypdf2 | Высокий | 6.5 | 0,63 % | PoCПатч | 30.06.2023 | |
| CVE-2026-89314 Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s Eclipse Foundation / Eclipse KeyPont - GOSE | Высокий | 6.9 | 0,39 % | PoC | 23.10.2026 | |
| CVE-2026-96958 .NET Denial of Service Vulnerability Microsoft / Microsoft .NET Framework 3.5 · Microsoft / Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | Высокий | 7.5 | 1,2 % | Патч | 13.10.2026 | |
| CVE-2026-84008 .NET Denial of Service Vulnerability Microsoft / Microsoft .NET Framework 3.5 · Microsoft / Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | Высокий | 7.5 | 0,99 % | Патч | 13.10.2026 | |
| CVE-2026-70196 ASP.NET Core Denial of Service Vulnerability Microsoft / ASP.NET Core 10.0 · Microsoft / ASP.NET Core 8.0 | Средний | 5.9 | 0,91 % | Патч | 13.10.2026 | |
| CVE-2026-69651 .NET Denial of Service Vulnerability Microsoft / .NET 10.0 runtime · Microsoft / .NET 11.0 runtime | Высокий | 7.5 | 1,25 % | Патч | 13.10.2026 | |
| CVE-2026-116577 Tornado: Quadratic CPU usage when parsing HTTP headers with line folding tornadoweb / tornado · tornado | Средний | 5.3 | 0,38 % | Патч | 26.10.2026 | |
| CVE-2026-119195 pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding pyasn1 / pyasn1 · pyasn1 | Критический | 7.5 | 0,53 % | PoCПатч | 29.10.2026 | |
| CVE-2026-119197 pyasn1: Quadratic-complexity denial of service in binary REAL decoding pyasn1 / pyasn1 · pyasn1 | Высокий | 7.5 | 0,43 % | Патч | 29.10.2026 | |
| CVE-2026-62160 Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware daptin / daptin · github.com/daptin/daptin | Критический | 8.7 | 0,42 % | PoC | 30.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.