CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-35107

    🚨 CVE-2026-35107 HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component). The...

  • CVE-2026-35110

    🚨 CVE-2026-35110 HCL AION is affected by a vulnerability where encrypted (HTTPS) communication was not enforced for all requests. Data may be...

  • CVE-2026-35111

    🚨 CVE-2026-35111 HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy (CORP) header was missing or insecure, allowing...

  • CVE-2026-35112

    🚨 CVE-2026-35112 HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy (COEP) header was missing or insecure, so embedded...

  • CVE-2026-35113

    🚨 CVE-2026-35113 HCL AION is affected by a vulnerability where the Cross-Origin-Opener-Policy (COOP) header was missing or insecure, allowing...

  • CVE-2026-5345

    🚨 CVE-2026-5345 HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface...

  • CVE-2026-118514

    🚨 CVE-2026-118514 In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11...

  • CVE-2026-123339

    🚨 CVE-2026-123339 Improper trust of forwarded headers in RouterListener::onKernelFinishRequest() in Symfony HttpKernel versions prior to 5.4.56...

  • CVE-2026-121623

    🚨 CVE-2026-121623 The Symfony Serializer component DataUriNormalizer::denormalize() matches the data: scheme with a case-sensitive regular...

  • CVE-2026-123792

    🚨 CVE-2026-123792 The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted document can...

  • CVE-2026-21834

    🚨 CVE-2026-21834 HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security response header was missing from...

  • CVE-2026-66981

    🚨 CVE-2026-66981 HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in requests...

  • CVE-2026-66982

    🚨 CVE-2026-66982 HCL AION is affected by a vulnerability where browser autocomplete was enabled on sensitive login form fields, allowing the...

  • CVE-2026-66984

    🚨 CVE-2026-66984 HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This...

  • CVE-2026-66986

    🚨 CVE-2026-66986 HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended...

  • CVE-2026-66987

    🚨 CVE-2026-66987 HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login...

  • CVE-2026-118515

    🚨 CVE-2026-118515 The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInfo, SplFileObject, and File, so for a...

  • CVE-2026-122053

    🚨 CVE-2026-122053 The Symfony Serializer component ObjectNormalizer treats any attribute name containing . (and, from Symfony 6.4, [) as a...

Статистика статей

Статьи
53,082
Просмотры
225,660
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху