CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-63663

    🚨 CVE-2026-63663 CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL...

  • CVE-2026-63664

    🚨 CVE-2026-63664 CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not...

  • CVE-2026-65960

    🚨 CVE-2026-65960 Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default...

  • CVE-2026-73860

    🚨 CVE-2026-73860 CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first...

  • CVE-2026-14456

    🚨 CVE-2026-14456 Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination...

  • CVE-2026-115731

    🚨 CVE-2026-115731 Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases...

  • CVE-2026-115732

    🚨 CVE-2026-115732 Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the...

  • CVE-2026-109836

    🚨 CVE-2026-109836 The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow...

  • CVE-2026-105296

    🚨 CVE-2026-105296 Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the...

  • CVE-2026-11749

    🚨 CVE-2026-11749 A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use...

  • CVE-2026-11753

    🚨 CVE-2026-11753 A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected...

  • CVE-2026-77690

    🚨 CVE-2026-77690 ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed...

  • CVE-2026-77779

    🚨 CVE-2026-77779 ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed...

  • CVE-2026-109849

    🚨 CVE-2026-109849 Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the...

  • CVE-2026-117679

    🚨 CVE-2026-117679 A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script...

  • CVE-2026-118869

    🚨 CVE-2026-118869 An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS...

  • CVE-2026-121139

    🚨 CVE-2026-121139 The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated...

  • CVE-2026-116472

    🚨 CVE-2026-116472 A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial...

Статистика статей

Статьи
53,082
Просмотры
226,877
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху