CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-92694

    🚨 CVE-2026-92694 FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers...

  • CVE-2026-92698

    🚨 CVE-2026-92698 FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, process_sflow_flow_sample() in...

  • CVE-2025-71458

    🚨 CVE-2025-71458 FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection...

  • CVE-2026-121837

    🚨 CVE-2026-121837 A flaw was found in the REST Data Panache component of Quarkus. When a security constraint is applied to an entity property...

  • CVE-2026-92856

    🚨 CVE-2026-92856 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when...

  • CVE-2026-115554

    🚨 CVE-2026-115554 IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scripting. This vulnerability allows an...

  • CVE-2026-14435

    🚨 CVE-2026-14435 IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which...

  • CVE-2026-14437

    🚨 CVE-2026-14437 IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system. An...

  • CVE-2026-19133

    🚨 CVE-2026-19133 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account...

  • CVE-2026-110468

    🚨 CVE-2026-110468 WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a...

  • CVE-2026-110468

    🚨 CVE-2026-110469 WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission...

  • CVE-2026-110468

    🚨 CVE-2026-112204 WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened...

  • CVE-2026-110468

    🚨 CVE-2026-112205 WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed...

  • CVE-2026-103906

    🚨 CVE-2026-103906 Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT...

  • CVE-2026-104989

    🚨 CVE-2026-104989 Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote...

  • CVE-2026-112164

    🚨 CVE-2026-112164 The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an...

  • CVE-2026-115337

    🚨 CVE-2026-115337 Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain...

  • CVE-2026-115341

    🚨 CVE-2026-115341 Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to...

Статистика статей

Статьи
53,082
Просмотры
200,099
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху