CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-45170

    🚨 CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS...

  • CVE-2026-20746

    🚨 CVE-2026-20746 Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java...

  • CVE-2026-47365

    🚨 CVE-2026-47365 Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to...

  • CVE-2026-47367

    🚨 CVE-2026-47367 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in...

  • CVE-2026-45169

    🚨 CVE-2026-45169 Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation...

  • CVE-2026-12060

    🚨 CVE-2026-12060 Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote...

  • CVE-2026-11535

    🚨 CVE-2026-11535 An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized...

  • CVE-2026-12058

    🚨 CVE-2026-12058 The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.

  • CVE-2026-11844

    🚨 CVE-2026-11844 The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing...

  • CVE-2026-11845

    🚨 CVE-2026-11845 The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing...

  • CVE-2026-11847

    🚨 CVE-2026-11847 The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing...

  • CVE-2026-49875

    🚨 CVE-2026-49875 Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP...

  • CVE-2026-50627

    🚨 CVE-2026-50627 The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This...

  • CVE-2026-50628

    🚨 CVE-2026-50628 A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing...

  • CVE-2026-50629

    🚨 CVE-2026-50629 The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without...

  • CVE-2026-50630

    🚨 CVE-2026-50630 A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response...

  • CVE-2026-50631

    🚨 CVE-2026-50631 A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Token to bypass single-use...

  • CVE-2026-50632

    🚨 CVE-2026-50632 A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache CXF has...

Статистика статей

Статьи
53,101
Просмотры
289,523
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху