CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123037

    🚨 CVE-2026-123037 A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files...

  • CVE-2026-19688

    🚨 CVE-2026-19688 A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The Admin API fails to verify the...

  • CVE-2026-92856

    🚨 CVE-2026-92856 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when...

  • CVE-2026-96460

    🚨 CVE-2026-96460 A flaw was found in the token exchange mechanism of Keycloak. When using Standard Token Exchange V2, the system issues new tokens...

  • CVE-2026-96547

    🚨 CVE-2026-96547 A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management...

  • CVE-2026-97367

    🚨 CVE-2026-97367 A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner...

  • CVE-2026-97848

    🚨 CVE-2026-97848 A flaw was found in the token sanitization logic of Keycloak, an open source identity and access management solution. The issue...

  • CVE-2026-73471

    🚨 CVE-2026-73471 A flaw was found in GStreamer gst-plugins-good (avidemux). In the Nikon metadata tag parser, a pointer can be dereferenced...

  • CVE-2026-9797

    🚨 CVE-2026-9797 A flaw was found in Keycloak's administrative services (org.keycloak.services.resources.admin). A highly privileged attacker...

  • CVE-2026-120844

    🚨 CVE-2026-120844 Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client)...

  • CVE-2026-121794

    🚨 CVE-2026-121794 The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all...

  • CVE-2026-115831

    🚨 CVE-2026-115831 The VOD Infomaniak plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.15. This...

  • CVE-2026-103479

    🚨 CVE-2026-103479 The Pubjet | پاب‌جت plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.4.8. This...

  • CVE-2026-114630

    🚨 CVE-2026-114630 The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to...

  • CVE-2026-112334

    🚨 CVE-2026-112334 Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged...

  • CVE-2026-112338

    🚨 CVE-2026-112338 Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module (wm_github.c) that...

  • CVE-2026-112340

    🚨 CVE-2026-112340 Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated...

  • CVE-2026-113618

    🚨 CVE-2026-113618 The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a...

Статистика статей

Статьи
53,084
Просмотры
231,620
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху