CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-12957

    🚨 CVE-2026-12957 Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for...

  • CVE-2026-12958

    🚨 CVE-2026-12958 Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary...

  • CVE-2026-13007

    🚨 CVE-2026-13007 Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application...

  • CVE-2026-33760

    🚨 CVE-2026-33760 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router...

  • CVE-2026-34912

    🚨 CVE-2026-34912 A missing access control check when linking banners or campaigns to a zone through the zone-include.php script of Revive Adserver...

  • CVE-2026-34913

    🚨 CVE-2026-34913 A missing access control check when linking trackers to campaigns through the campaign-trackers.php script of Revive Adserver...

  • CVE-2026-34914

    🚨 CVE-2026-34914 A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. A low‑privileged user...

  • CVE-2026-34915

    🚨 CVE-2026-34915 A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier could allow a...

  • CVE-2026-34917

    🚨 CVE-2026-34917 Low‑privileged session IDs generated for the web admin console could be reused in the XML‑RPC API, whose authentication is...

  • CVE-2026-42867

    🚨 CVE-2026-42867 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path...

  • CVE-2026-44789

    🚨 CVE-2026-44789 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission...

  • CVE-2026-44790

    🚨 CVE-2026-44790 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission...

  • CVE-2026-44791

    🚨 CVE-2026-44791 n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission...

  • CVE-2026-44956

    🚨 CVE-2026-44956 Low‑privileged users could use their Full Name as a vector for a stored XSS attack. The name is included in system‑generated...

  • CVE-2026-44957

    🚨 CVE-2026-44957 A missing access control check when invoking various modify methods in the XML‑RPC API of Revive Adserver 6.0.6 and earlier. The...

  • CVE-2026-44958

    🚨 CVE-2026-44958 An access control bypass allows an advertiser‑level user to activate or deactivate a banner in Revive Adserver 6.0.6 and earlier...

  • CVE-2026-44959

    🚨 CVE-2026-44959 A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged...

  • CVE-2026-44960

    🚨 CVE-2026-44960 A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details...

Статистика статей

Статьи
53,101
Просмотры
291,400
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху