CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123843

    🚨 CVE-2026-123843 In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration

  • CVE-2026-123844

    🚨 CVE-2026-123844 In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories

  • CVE-2026-123845

    🚨 CVE-2026-123845 In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects

  • CVE-2026-123846

    🚨 CVE-2026-123846 In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation

  • CVE-2026-123847

    🚨 CVE-2026-123847 In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion

  • CVE-2026-123848

    🚨 CVE-2026-123848 In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

  • CVE-2026-123849

    🚨 CVE-2026-123849 In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers

  • CVE-2026-123850

    🚨 CVE-2026-123850 In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives

  • CVE-2026-123851

    🚨 CVE-2026-123851 In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

  • CVE-2026-123852

    🚨 CVE-2026-123852 In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

  • CVE-2026-123853

    🚨 CVE-2026-123853 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options...

  • CVE-2026-123854

    🚨 CVE-2026-123854 In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module

  • CVE-2026-123855

    🚨 CVE-2026-123855 In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs

  • CVE-2026-123856

    🚨 CVE-2026-123856 In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server

  • CVE-2026-123857

    🚨 CVE-2026-123857 In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection

  • CVE-2026-123858

    🚨 CVE-2026-123858 In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects

  • CVE-2026-19703

    🚨 CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could...

  • CVE-2026-77708

    🚨 CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client...

Статистика статей

Статьи
53,082
Просмотры
226,877
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху