СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
23| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2024-58362 SurrealDB before 1.5.5 Query Injection via RPC API surrealdb / surrealdb | Высокий | 8.7 | 0,64 % | 18.07.2026 | ||
| CVE-2026-31908 Apache APISIX: forward auth plugin allows header injection Apache Software Foundation / Apache APISIX · apache / apisix | Критический | 9.1 | 0,52 % | 14.04.2026 | ||
| CVE-2025-61911 python-ldap has sanitization bypass in ldap.filter.escape_filter_chars python-ldap / python-ldap · python-ldap | Средний | 5.5 | 0,32 % | 11.10.2025 | ||
| CVE-2024-21503 Black vulnerable to Regular Expression Denial of Service (ReDoS) n/a / black · python_software_foundation / black | Средний | 5.3 | 0,98 % | Патч | 19.03.2024 | |
| CVE-2026-54771 Langroid: handle_message() executes user-supplied tool JSON without sender verification langroid / langroid · langroid | Критический | 8.1 | 0,39 % | PoC | 10.07.2026 | |
| CVE-2025-50213 Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator Apache Software Foundation / Apache Airflow Providers Snowflake · apache-airflow-providers-snowflake | Критический | 9.8 | 0,77 % | Патч | 24.06.2025 | |
| CVE-2024-9940 Calculated Fields Form <= 5.2.45 - HTML Injection codepeople / Calculated Fields Form · codepeople / calculated_fields_form | Средний | 5.3 | 0,4 % | 17.10.2024 | ||
| CVE-2024-23274 An injection issue was addressed with improved input validation. This issue is fixed in macOS Monter Apple / macOS · apple / macos | Высокий | 8.4 | 0,42 % | 08.03.2024 | ||
| CVE-2024-23268 An injection issue was addressed with improved input validation. This issue is fixed in macOS Monter Apple / macOS · apple / macos | Высокий | 8.4 | 0,42 % | 08.03.2024 | ||
| CVE-2026-29042 Nuclio Shell Runtime Command Injection Leading to Privilege Escalation nuclio / nuclio | Высокий | 8.9 | 2,59 % | 06.03.2026 | ||
| CVE-2026-27120 Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster vapor / leaf-kit | Средний | 6.1 | 0,27 % | 21.02.2026 | ||
| CVE-2024-27708 Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows n/a / n/a | Критический | 9.6 | 0,61 % | 22.12.2025 | ||
| CVE-2024-31806 TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerabil n/a / n/a · totolink / ex200_firmware | Средний | 6.5 | 0,39 % | 08.04.2024 | ||
| CVE-2024-35373 Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php. n/a / n/a · mocado / mocado | Критический | 9.8 | 1,18 % | 24.05.2024 | ||
| CVE-2024-0044 In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to Google / Android · google / android | Высокий | 7.8 | 1,46 % | 11.03.2024 | ||
| CVE-2024-37779 WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) n/a / n/a · woodwing_elvis_dam / woodwing_elvis_dam | Высокий | 8.8 | 1,1 % | 23.09.2024 | ||
| CVE-2024-27622 A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Mad n/a / n/a · cmsmadesimple / cms_made_simple | Высокий | 7.2 | 1,98 % | 05.03.2024 | ||
| CVE-2024-0801 Unauthenticated DoS in Arcserve Unified Data Protection Arcserve / Unified Data Protection · arcserve / udp | Критический | 7.5 | 41,84 % | 13.03.2024 | ||
| CVE-2024-39227 GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT n/a / n/a · gl-inet / gl-mt2500 | Критический | 9.8 | 1,19 % | 06.08.2024 | ||
| CVE-2024-39243 An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request n/a / n/a · skycaiji / skycaiji | Критический | 9.8 | 0,49 % | 26.06.2024 | ||
| CVE-2024-31809 TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulner n/a / n/a · totolink / ex200_firmware | Высокий | 8.8 | 0,98 % | 08.04.2024 | ||
| CVE-2024-31812 In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without autho n/a / n/a · totolink / ex200_firmware | Средний | 6.5 | 0,34 % | 08.04.2024 | ||
| CVE-2024-24257 An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an at n/a / n/a · zkteco / zktime_web | Высокий | 7.5 | 0,39 % | 26.07.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.