CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-45230

    🚨 CVE-2026-45230 DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array...

  • CVE-2026-45231

    🚨 CVE-2026-45231 DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description...

  • CVE-2026-21789

    🚨 CVE-2026-21789 HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.

  • CVE-2026-47090

    🚨 CVE-2026-47090 Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and...

  • CVE-2026-47091

    🚨 CVE-2026-47091 Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read...

  • CVE-2026-47092

    🚨 CVE-2026-47092 Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to...

  • CVE-2026-46721

    🚨 CVE-2026-46721 The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the...

  • CVE-2026-46722

    🚨 CVE-2026-46722 The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an...

  • CVE-2026-46723

    🚨 CVE-2026-46723 The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user...

  • CVE-2026-46724

    🚨 CVE-2026-46724 The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations...

  • CVE-2026-46725

    🚨 CVE-2026-46725 The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote...

  • CVE-2026-8726

    🚨 CVE-2026-8726 The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker...

  • CVE-2026-8727

    🚨 CVE-2026-8727 The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize(). An attacker...

  • CVE-2026-8827

    🚨 CVE-2026-8827 The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL...

  • CVE-2026-37979

    🚨 CVE-2026-37979 A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) token introspection endpoint...

  • CVE-2026-37982

    🚨 CVE-2026-37982 A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `ExecuteActionsActionToken`...

  • CVE-2026-45442

    🚨 CVE-2026-45442 Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control...

  • CVE-2026-4630

    🚨 CVE-2026-4630 A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in...

Статистика статей

Статьи
53,102
Просмотры
292,174
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху