CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123848

    🚨 CVE-2026-123848 In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

  • CVE-2026-123851

    🚨 CVE-2026-123851 In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

  • CVE-2026-123859

    🚨 CVE-2026-123859 When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the...

  • CVE-2026-123824

    🚨 CVE-2026-123824 The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype, allowing...

  • CVE-2026-107155

    🚨 CVE-2026-107155 A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific...

  • CVE-2026-119923

    🚨 CVE-2026-119923 A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15...

  • CVE-2026-119924

    🚨 CVE-2026-119924 An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15...

  • CVE-2026-19703

    🚨 CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could...

  • CVE-2026-19868

    🚨 CVE-2026-19868 An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...

  • CVE-2026-77708

    🚨 CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client...

  • CVE-2026-77709

    🚨 CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client...

  • CVE-2026-82308

    🚨 CVE-2026-82308 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could...

  • CVE-2026-109683

    🚨 CVE-2026-109683 A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can supply...

  • CVE-2026-123974

    🚨 CVE-2026-123974 In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and...

  • CVE-2025-54991

    🚨 CVE-2025-54991 JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS...

  • CVE-2025-55002

    🚨 CVE-2025-55002 JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS...

  • CVE-2026-102344

    🚨 CVE-2026-102344 Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback HTTP server did not authenticate...

  • CVE-2026-102530

    🚨 CVE-2026-102530 JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted...

Статистика статей

Статьи
53,082
Просмотры
226,877
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху