CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119724

    🚨 CVE-2026-119724 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')...

  • CVE-2026-114442

    🚨 CVE-2026-114442 Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP...

  • CVE-2026-89295

    🚨 CVE-2026-89295 In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supplied...

  • CVE-2026-105821

    🚨 CVE-2026-105821 The Tapo Cloud MQTT broker contains a broken access control vulnerability in a proxy topic used by authenticated Tapo devices to...

  • CVE-2026-105822

    🚨 CVE-2026-105822 The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a user-controlled host...

  • CVE-2026-120567

    🚨 CVE-2026-120567 The MongoDB Entity Framework Core provider does not neutralize special elements in values passed to SetProperty when an...

  • CVE-2026-121577

    🚨 CVE-2026-121577 Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.2.0...

  • CVE-2026-93325

    🚨 CVE-2026-93325 Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the...

  • CVE-2026-95723

    🚨 CVE-2026-95723 A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful...

  • CVE-2026-95724

    🚨 CVE-2026-95724 An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation...

  • CVE-2026-95725

    🚨 CVE-2026-95725 A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local...

  • CVE-2026-95726

    🚨 CVE-2026-95726 A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial of...

  • CVE-2026-95728

    🚨 CVE-2026-95728 An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Successful exploitation could allow a...

  • CVE-2026-115731

    🚨 CVE-2026-115731 Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases...

  • CVE-2026-115732

    🚨 CVE-2026-115732 Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the...

  • CVE-2026-119636

    🚨 CVE-2026-119636 Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0...

  • CVE-2026-120715

    🚨 CVE-2026-120715 Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows...

  • CVE-2026-120716

    🚨 CVE-2026-120716 Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server...

Статистика статей

Статьи
53,083
Просмотры
228,155
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху