CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-47323

    🚨 CVE-2026-47323 Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy...

  • CVE-2026-40810

    🚨 CVE-2026-40810 An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to...

  • CVE-2026-42730

    🚨 CVE-2026-42730 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS...

  • CVE-2026-42731

    🚨 CVE-2026-42731 Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows...

  • CVE-2026-42733

    🚨 CVE-2026-42733 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 WPCS...

  • CVE-2026-42734

    🚨 CVE-2026-42734 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup...

  • CVE-2026-42735

    🚨 CVE-2026-42735 Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...

  • CVE-2026-48544

    🚨 CVE-2026-48544 Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get_resource() method in...

  • CVE-2026-48916

    🚨 CVE-2026-48916 Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.

  • CVE-2026-48917

    🚨 CVE-2026-48917 Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.

  • CVE-2026-48926

    🚨 CVE-2026-48926 Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing...

  • CVE-2026-48973

    🚨 CVE-2026-48973 Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-49044

    🚨 CVE-2026-49044 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced...

  • CVE-2026-49045

    🚨 CVE-2026-49045 Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-21785

    🚨 CVE-2026-21785 A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails...

  • CVE-2026-44710

    🚨 CVE-2026-44710 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return...

  • CVE-2026-44711

    🚨 CVE-2026-44711 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad...

  • CVE-2026-44712

    🚨 CVE-2026-44712 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such as...

Статистика статей

Статьи
53,101
Просмотры
291,400
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху