CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119170

    🚨 CVE-2026-119170 There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS...

  • CVE-2026-123485

    🚨 CVE-2026-123485 Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as...

  • CVE-2026-123487

    🚨 CVE-2026-123487 Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address format with a regular expression whose...

  • CVE-2026-123489

    🚨 CVE-2026-123489 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulnerability because the sandbox-exposed...

  • CVE-2026-123617

    🚨 CVE-2026-123617 Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups...

  • CVE-2026-123783

    🚨 CVE-2026-123783 Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing...

  • CVE-2026-53980

    🚨 CVE-2026-53980 Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware (charm.land/wish/v2) that allows...

  • CVE-2026-121880

    🚨 CVE-2026-121880 Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server...

  • CVE-2026-121881

    🚨 CVE-2026-121881 SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit Software, PBC Posit Workbench before...

  • CVE-2026-123675

    🚨 CVE-2026-123675 A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function...

  • CVE-2026-103984

    🚨 CVE-2026-103984 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, when limit_user_customer_visibility is enabled, the...

  • CVE-2026-103985

    🚨 CVE-2026-103985 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, the profile form exposes the only_assigned_tickets...

  • CVE-2026-104656

    🚨 CVE-2026-104656 Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an...

  • CVE-2026-104657

    🚨 CVE-2026-104657 Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which...

  • CVE-2026-106127

    🚨 CVE-2026-106127 Prototype Pollution in the setter utility (@progress/kendo-react-common) in Progress Software KendoReact versions 3.5.0 through...

  • CVE-2026-106134

    🚨 CVE-2026-106134 Cross-Site Scripting (XSS) in the Menu component (@progress/kendo-react-layout) in Progress Software KendoReact versions 1.3.0...

  • CVE-2026-106135

    🚨 CVE-2026-106135 Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo UI for...

  • CVE-2026-106136

    🚨 CVE-2026-106136 Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-react-conversational-ui) in Progress Software KendoReact...

Статистика статей

Статьи
53,084
Просмотры
229,863
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху