CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-69050

    🚨 CVE-2026-69050 Out-of-bounds memory access in a device driver due to improper resource state tracking.

  • CVE-2026-69066

    🚨 CVE-2026-69066 Memory corruption in GPU driver due to improper validation of VMID reservation.

  • CVE-2026-114366

    🚨 CVE-2026-114366 An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets module.

  • CVE-2026-19876

    🚨 CVE-2026-19876 A reflected cross-site scripting (XSS) vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1_BN48_20260528 and...

  • CVE-2026-19877

    🚨 CVE-2026-19877 INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict...

  • CVE-2026-123087

    🚨 CVE-2026-123087 SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing...

  • CVE-2026-106019

    🚨 CVE-2026-106019 Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known...

  • CVE-2026-106020

    🚨 CVE-2026-106020 Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools...

  • CVE-2026-106022

    🚨 CVE-2026-106022 Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer...

  • CVE-2026-64894

    🚨 CVE-2026-64894 Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools...

  • CVE-2026-106128

    🚨 CVE-2026-106128 Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0 allows a...

  • CVE-2026-106141

    🚨 CVE-2026-106141 Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for Angular...

  • CVE-2026-122053

    🚨 CVE-2026-122053 The Symfony Serializer component ObjectNormalizer treats any attribute name containing . (and, from Symfony 6.4, [) as a...

  • CVE-2026-122193

    🚨 CVE-2026-122193 OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might...

  • CVE-2026-123834

    🚨 CVE-2026-123834 In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account

  • CVE-2026-123836

    🚨 CVE-2026-123836 In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup

  • CVE-2026-123840

    🚨 CVE-2026-123840 In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs

  • CVE-2026-123846

    🚨 CVE-2026-123846 In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation

Статистика статей

Статьи
53,082
Просмотры
226,877
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху