CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-7167

    🚨 CVE-2026-7167 The vulnerability arises when the system fails to properly validate the 'email' field during the authentication process, allowing...

  • CVE-2026-9029

    🚨 CVE-2026-9029 A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a...

  • CVE-2026-10845

    🚨 CVE-2026-10845 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access...

  • CVE-2026-11372

    🚨 CVE-2026-11372 IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an...

  • CVE-2026-12479

    🚨 CVE-2026-12479 A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within...

  • CVE-2026-41045

    🚨 CVE-2026-41045 A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass...

  • CVE-2026-41046

    🚨 CVE-2026-41046 A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use...

  • CVE-2026-41047

    🚨 CVE-2026-41047 Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see...

  • CVE-2026-41048

    🚨 CVE-2026-41048 Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to...

  • CVE-2026-41049

    🚨 CVE-2026-41049 Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed any local...

  • CVE-2026-53550

    🚨 CVE-2026-53550 js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU...

  • CVE-2026-7664

    🚨 CVE-2026-7664 IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute...

  • CVE-2026-8858

    🚨 CVE-2026-8858 IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial...

  • CVE-2026-8934

    🚨 CVE-2026-8934 A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console...

  • CVE-2026-9006

    🚨 CVE-2026-9006 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured...

  • CVE-2026-9072

    🚨 CVE-2026-9072 IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the...

  • CVE-2026-10789

    🚨 CVE-2026-10789 A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can...

  • CVE-2026-48712

    🚨 CVE-2026-48712 protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse...

Статистика статей

Статьи
53,098
Просмотры
285,550
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху