Статьи Support
🚨 CVE-2026-120630
CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by checking opposite content passed to it, enabling any request that injects a malicious URL to perform SSRF, such as with the ScrapWebsiteTool.
🚨 CVE-2026-65674
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
🚨 CVE-2026-67625
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
🚨 CVE-2026-68883
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
🚨 CVE-2026-70189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
🚨 CVE-2026-83945
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
🚨 CVE-2026-85876
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85886
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
🚨 CVE-2026-85919
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-88082
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-88083
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-88088
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-88089
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
🚨 CVE-2026-94512
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
🚨 CVE-2026-96956
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
🚨 CVE-2026-91295
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
🚨 CVE-2026-91296
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
🚨 CVE-2026-91297
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
🚨 CVE-2026-91298
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.