СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
17| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-112326 Improper Cleanup on Thrown Exception in GitLab GitLab / GitLab · gitlab / gitlab | Низкий | 3.1 | 0,18 % | 22.10.2026 | ||
| CVE-2026-40583 UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt UltraDAGcom / core · ultradag / ultradag | Критический | 8.8 | 0,38 % | PoCПатч | 21.04.2026 | |
| CVE-2026-111103 HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit mtrudel / bandit | Высокий | 8.2 | 0,63 % | Патч | 26.10.2026 | |
| CVE-2026-48524 PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) jpadilla / pyjwt · pyjwt_project / pyjwt | Низкий | 3.7 | 0,4 % | 28.05.2026 | ||
| CVE-2026-96273 Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB NationalSecurityAgency / ghidra | Средний | 6.8 | 0,13 % | Патч | 23.09.2026 | |
| CVE-2026-93710 Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks Продукт уточняется | Высокий | 7.5 | 0,63 % | Патч | 22.09.2026 | |
| CVE-2026-86748 Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive grokability / snipe-it | Высокий | 6.9 | 0,4 % | PoC | 09.09.2026 | |
| CVE-2026-61387 In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: Eclipse Foundation / Eclipse Milo | Средний | 6.9 | 0,62 % | 04.08.2026 | ||
| CVE-2026-33481 Syft improper temporary file cleanup anchore / syft | Средний | 5.3 | 0,42 % | 26.03.2026 | ||
| CVE-2026-20118 Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability Cisco / Cisco IOS XR Software | Средний | 6.8 | 0,34 % | 11.03.2026 | ||
| CVE-2025-69652 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when proces n/a / n/a | Средний | 6.2 | 0,2 % | 06.03.2026 | ||
| CVE-2025-59399 libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is th EVerest / libocpp | Низкий | 3.1 | 0,17 % | 15.09.2025 | ||
| CVE-2025-32439 pleezer allows resource exhaustion through uncollected hook script processes roderickvd / pleezer | Средний | 6.5 | 0,39 % | 15.04.2025 | ||
| CVE-2025-30157 Envoy crashes when HTTP ext_proc processes local replies envoyproxy / envoy | Высокий | 6.5 | 0,44 % | PoC | 21.03.2025 | |
| CVE-2024-12289 Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service HashiCorp / Boundary · HashiCorp / Boundary Enterprise | Средний | 5.9 | 0,39 % | 13.12.2024 | ||
| CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security FireEye / FireEye Endpoint Security | Средний | 6.8 | 0,32 % | 15.01.2024 | ||
| CVE-2024-20354 A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Soft Cisco / Cisco Aironet Access Point Software · Cisco / Cisco Aironet Access Point Software (IOS XE Controller) | Средний | 4.7 | 0,29 % | 27.03.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.