CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2023-43789

    🚨 CVE-2023-43789 A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an...

  • CVE-2023-4692

    🚨 CVE-2023-4692 An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...

  • CVE-2023-4693

    🚨 CVE-2023-4693 An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to...

  • CVE-2023-3972

    🚨 CVE-2023-3972 A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of...

  • CVE-2023-42670

    🚨 CVE-2023-42670 A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated...

  • CVE-2023-3961

    🚨 CVE-2023-3961 A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within...

  • CVE-2023-4910

    🚨 CVE-2023-4910 A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the...

  • CVE-2023-4001

    🚨 CVE-2023-4001 An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration...

  • CVE-2023-3758

    🚨 CVE-2023-3758 A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to...

  • CVE-2023-4727

    🚨 CVE-2023-4727 A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the...

  • CVE-2024-5953

    🚨 CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a...

  • CVE-2024-6126

    🚨 CVE-2024-6126 A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's...

  • CVE-2024-5971

    🚨 CVE-2024-5971 A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body...

  • CVE-2023-39327

    🚨 CVE-2023-39327 A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print...

  • CVE-2023-39329

    🚨 CVE-2023-39329 A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted...

  • CVE-2026-18206

    🚨 CVE-2026-18206 A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The...

  • CVE-2026-18569

    🚨 CVE-2026-18569 A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of...

  • CVE-2026-94218

    🚨 CVE-2026-94218 A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue...

Статистика статей

Статьи
53,082
Просмотры
222,786
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху