CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.
  • CVE-2026-88981

    🚨 CVE-2026-88981 Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend...
  • CVE-2026-88982

    🚨 CVE-2026-88982 Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the legacy...
  • CVE-2026-88984

    🚨 CVE-2026-88984 Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.16.1, the...
  • CVE-2026-123276

    🚨 CVE-2026-123276 In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
  • CVE-2026-123277

    🚨 CVE-2026-123277 In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment...
  • CVE-2026-123278

    🚨 CVE-2026-123278 In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
  • CVE-2026-123279

    🚨 CVE-2026-123279 In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators
  • CVE-2026-123280

    🚨 CVE-2026-123280 In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports
  • CVE-2026-123281

    🚨 CVE-2026-123281 In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
  • CVE-2026-123282

    🚨 CVE-2026-123282 In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session
  • CVE-2026-123283

    🚨 CVE-2026-123283 In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account
  • CVE-2026-123284

    🚨 CVE-2026-123284 In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared...
  • CVE-2026-123285

    🚨 CVE-2026-123285 In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection
  • CVE-2026-123287

    🚨 CVE-2026-123287 In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive...
  • CVE-2026-123288

    🚨 CVE-2026-123288 In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
  • CVE-2026-123289

    🚨 CVE-2026-123289 In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files
  • CVE-2026-123290

    🚨 CVE-2026-123290 In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report...
  • CVE-2026-123291

    🚨 CVE-2026-123291 In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook

Статистика статей

Статьи
53,082
Просмотры
225,660
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху