CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2013-2056

    🚨 CVE-2013-2056 A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between...

  • CVE-2012-5562

    🚨 CVE-2012-5562 A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it...

  • CVE-2024-7557

    🚨 CVE-2024-7557 A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the...

  • CVE-2024-9675

    🚨 CVE-2024-9675 A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our...

  • CVE-2024-11218

    🚨 CVE-2024-11218 A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race...

  • CVE-2026-42010

    🚨 CVE-2026-42010 A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames...

  • CVE-2026-42009

    🚨 CVE-2026-42009 A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet...

  • CVE-2026-39910

    🚨 CVE-2026-39910 STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint. An authenticated...

  • CVE-2026-15555

    🚨 CVE-2026-15555 A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss...

  • CVE-2026-77884

    🚨 CVE-2026-77884 Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server...

  • CVE-2026-93289

    🚨 CVE-2026-93289 The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system...

  • CVE-2026-8374

    🚨 CVE-2026-8374 Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic...

  • CVE-2026-108762

    🚨 CVE-2026-108762 Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly...

  • CVE-2026-108764

    🚨 CVE-2026-108764 Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed...

  • CVE-2026-108766

    🚨 CVE-2026-108766 Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed...

  • CVE-2026-108771

    🚨 CVE-2026-108771 Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the...

  • CVE-2026-108776

    🚨 CVE-2026-108776 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact...

  • CVE-2026-108780

    🚨 CVE-2026-108780 Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend...

Статистика статей

Статьи
53,101
Просмотры
288,506
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху