СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
25| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-35381 uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering Uutils / coreutils · uutils / coreutils | Средний | 3.3 | 0,18 % | PoCПатч | 22.04.2026 | |
| CVE-2026-35379 uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling Uutils / coreutils · uutils / coreutils | Средний | 3.3 | 0,15 % | PoCПатч | 22.04.2026 | |
| CVE-2026-34478 Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility Apache Software Foundation / Apache Log4j Core · apache / log4j | Средний | 6.9 | 0,97 % | Патч | 10.04.2026 | |
| CVE-2026-42255 Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation Technitium / DnsServer · technitium / dnsserver | Высокий | 7.2 | 0,21 % | 26.04.2026 | ||
| CVE-2026-44597 Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a re torproject / Tor · torproject / tor | Критический | 9.1 | 0,45 % | Патч | 07.05.2026 | |
| CVE-2026-106361 Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8 Google / Chrome | Средний | 6.5 | 0,28 % | 06.10.2026 | ||
| CVE-2026-106390 Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059. Google / Chrome | Средний | 4.3 | 0,2 % | 06.10.2026 | ||
| CVE-2026-79126 Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152. Google / Chrome | Средний | 5.9 | 0,24 % | 25.08.2026 | ||
| CVE-2026-52735 ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser ZcashFoundation / zebra | Критический | 9.3 | 0,51 % | 18.08.2026 | ||
| CVE-2026-40684 In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection Exim / Exim | Средний | 5.9 | 0,36 % | 30.04.2026 | ||
| CVE-2026-40685 In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSO Exim / Exim | Средний | 6.5 | 0,32 % | 30.04.2026 | ||
| CVE-2026-3598 RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption rustdesk-server-pro / RustDesk Server Pro | Критический | 8.7 | 0,26 % | PoC | 05.03.2026 | |
| CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation rustdesk-client / RustDesk Client | Критический | 8.7 | 0,27 % | PoC | 05.03.2026 | |
| CVE-2025-58325 An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 th Fortinet / FortiOS | Высокий | 7.8 | 0,29 % | 14.10.2025 | ||
| CVE-2025-66384 app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded MISP / MISP | Высокий | 8.2 | 0,39 % | 28.11.2025 | ||
| CVE-2025-55174 In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new f KDE / Skanpage | Низкий | 3.2 | 0,15 % | 26.11.2025 | ||
| CVE-2025-54567 hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue QEMU / QEMU | Средний | 4.2 | 0,29 % | 25.07.2025 | ||
| CVE-2025-54568 Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresho Akamai / Rate Control | Низкий | 3.7 | 0,37 % | 25.07.2025 | ||
| CVE-2025-47227 In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrat ScriptCase / ScriptCase | Критический | 7.5 | 1,92 % | PoC | 05.07.2025 | |
| CVE-2024-50357 FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configu Century Systems Co., Ltd. / FutureNet NXR-G110 series · Century Systems Co., Ltd. / FutureNet NXR-G060 series | Критический | 9.8 | 0,55 % | 29.11.2024 | ||
| CVE-2024-5005 Incorrect Provision of Specified Functionality in GitLab GitLab / GitLab | Высокий | 4.3 | 0,4 % | PoC | 11.10.2024 | |
| CVE-2024-8974 Incorrect Provision of Specified Functionality in GitLab GitLab / GitLab | Низкий | 2.6 | 0,29 % | 27.09.2024 | ||
| CVE-2024-20317 Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability Cisco / Cisco IOS XR Software | Высокий | 7.4 | 0,24 % | 11.09.2024 | ||
| CVE-2024-6502 Incorrect Provision of Specified Functionality in GitLab GitLab / GitLab | Высокий | 5.7 | 0,43 % | PoC | 22.08.2024 | |
| CVE-2024-6425 Incorrect Provision of Specified Functionality vulnerability in MESbook MESbook / MESbook · mesbook / mesbook | Критический | 9.1 | 0,54 % | 01.07.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.