CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112337

    🚨 CVE-2026-112337 Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle get_graph_events()...

  • CVE-2026-112338

    🚨 CVE-2026-112338 Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module (wm_github.c) that...

  • CVE-2026-112339

    🚨 CVE-2026-112339 Wazuh from 3.9.0 before 4.14.9 contains a missing TLS hostname verification vulnerability in the fluent-forward module's...

  • CVE-2026-112340

    🚨 CVE-2026-112340 Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated...

  • CVE-2026-112341

    🚨 CVE-2026-112341 Wazuh versions from 4.0.0 before 4.14.9 contain a sql injection vulnerability in WazuhDBBackend._substitute_params due to...

  • CVE-2026-123488

    🚨 CVE-2026-123488 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element...

  • CVE-2026-123489

    🚨 CVE-2026-123489 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulnerability because the sandbox-exposed...

  • CVE-2026-123490

    🚨 CVE-2026-123490 Craft CMS from 5.8.17 before 5.11.2 contains a privilege escalation vulnerability because getOwners() applies caller criteria...

  • CVE-2026-123491

    🚨 CVE-2026-123491 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading...

  • CVE-2026-123833

    🚨 CVE-2026-123833 In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects

  • CVE-2026-123834

    🚨 CVE-2026-123834 In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account

  • CVE-2026-123835

    🚨 CVE-2026-123835 In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race...

  • CVE-2026-123836

    🚨 CVE-2026-123836 In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup

  • CVE-2026-123837

    🚨 CVE-2026-123837 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run...

  • CVE-2026-123838

    🚨 CVE-2026-123838 In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file

  • CVE-2026-123839

    🚨 CVE-2026-123839 In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development...

  • CVE-2026-123840

    🚨 CVE-2026-123840 In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs

  • CVE-2026-123841

    🚨 CVE-2026-123841 In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive

Статистика статей

Статьи
53,082
Просмотры
228,155
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху