CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-66621

    🚨 CVE-2025-66621 Apache James SASL OAuthBearer/XOAUTH2 prior versions 3.9.1 fails to validate correctly AUD claim of JWT payloads when...

  • CVE-2026-49939

    🚨 CVE-2026-49939 In Apache James server prior version 3.9.1 improper Access Control List processing is exposed by the JMAP protocol which do not...

  • CVE-2026-76168

    🚨 CVE-2026-76168 In Apache James server prior version 3.9.1 relying on the SieveFileRepository incorect validation of file paths can result in...

  • CVE-2026-76171

    🚨 CVE-2026-76171 In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to...

  • CVE-2026-85108

    🚨 CVE-2026-85108 Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service...

  • CVE-2026-85111

    🚨 CVE-2026-85111 Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service...

  • CVE-2026-105422

    🚨 CVE-2026-105422 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software...

  • CVE-2026-123746

    🚨 CVE-2026-123746 The Symfony Security HTTP component AuthenticatorManager::authenticateUser() does not run the firewall user checker’s...

  • CVE-2026-35114

    🚨 CVE-2026-35114 HCL AION is affected by a vulnerability where the X-Content-Type-Options header was missing or insecure, allowing browsers to...

  • CVE-2026-35115

    🚨 CVE-2026-35115 HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security (HSTS) header was missing or insecurely...

  • CVE-2026-92080

    🚨 CVE-2026-92080 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software...

  • CVE-2026-21849

    🚨 CVE-2026-21849 HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface. The...

  • CVE-2026-21850

    🚨 CVE-2026-21850 HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper...

  • CVE-2026-35102

    🚨 CVE-2026-35102 HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar component). The...

  • CVE-2026-35103

    🚨 CVE-2026-35103 HCL AION is affected by an open redirect vulnerability on the role assignment pending page (RoleAssignPending component). The...

  • CVE-2026-35104

    🚨 CVE-2026-35104 HCL AION is affected by an open redirect vulnerability on the user registration page (Signup component). The redirect performed...

  • CVE-2026-35105

    🚨 CVE-2026-35105 HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext...

  • CVE-2026-35106

    🚨 CVE-2026-35106 HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext...

Статистика статей

Статьи
53,082
Просмотры
225,660
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху