СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
15| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-13584 Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR300-16 · Mitsubishi Electric Corporation / MELSEC MX Controller MX-R model MXR300-32 | Высокий | 7.1 | 0,19 % | 30.07.2026 | ||
| CVE-2026-85104 Brain stimulation parameters can be modified via Bluetooth in Sooma Sooma / Sooma tDCS Home Therapy | Средний | 5.3 | 0,16 % | 16.09.2026 | ||
| CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl Erlang / OTP | Средний | 6.3 | 0,14 % | Патч | 02.07.2026 | |
| CVE-2026-14681 PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL n/a / PostgreSQL | Средний | 4.2 | 0,08 % | 13.08.2026 | ||
| CVE-2026-48106 Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer Basekick-Labs / arc | Высокий | 8.3 | 0,22 % | 22.08.2026 | ||
| CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests coturn / coturn | Средний | 2.3 | 0,19 % | PoC | 19.08.2026 | |
| CVE-2024-52288 RMAC revert to the beginning of the session in libosdp goToMain / libosdp · libosdp | Средний | 5.1 | 0,13 % | 11.11.2024 | ||
| CVE-2026-12576 DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability deltaww / DVP80ES3 | Высокий | 7.5 | 0,23 % | 01.07.2026 | ||
| CVE-2025-29628 A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Ho Gardyn / Home Kit Firmware | Критический | 9.4 | 0,3 % | 25.07.2025 | ||
| CVE-2024-12399 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vu Schneider Electric / Pro-face GP-Pro EX · Schneider Electric / Pro-face Remote HMI | Средний | 6.1 | 0,17 % | 17.01.2025 | ||
| CVE-2024-43450 Windows DNS Spoofing Vulnerability Microsoft / Windows Server 2019 · Microsoft / Windows Server 2019 (Server Core installation) | Высокий | 7.5 | 0,61 % | 12.11.2024 | ||
| CVE-2025-0592 SICK Lector8xx and InspectorP8xx vulnerable for code execution SICK AG / SICK Lector8xx · SICK AG / SICK InspectorP8xx | Высокий | 8.8 | 0,36 % | 14.02.2025 | ||
| CVE-2024-39229 An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.1 n/a / n/a | Средний | 6.5 | 0,18 % | 06.08.2024 | ||
| CVE-2024-8933 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
vu Schneider Electric / Modicon M340 CPU (part numbers BMXP34*) · Schneider Electric / Modicon MC80 (part numbers BMKC80) | Высокий | 7.5 | 0,3 % | 13.11.2024 | ||
| CVE-2024-44730 Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commi n/a / n/a · mirotalk / mirotalk_p2p | Критический | 9.1 | 0,43 % | 11.10.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.