CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58369

    🚨 CVE-2026-58369 Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the...

  • CVE-2026-58370

    🚨 CVE-2026-58370 Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driver...

  • CVE-2026-58373

    🚨 CVE-2026-58373 CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.get_queryset that allows...

  • CVE-2026-58375

    🚨 CVE-2026-58375 JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated...

  • CVE-2026-8864

    🚨 CVE-2026-8864 The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to...

  • CVE-2026-9263

    🚨 CVE-2026-9263 The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length...

  • CVE-2026-58138

    🚨 CVE-2026-58138 Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote...

  • CVE-2026-10109

    🚨 CVE-2026-10109 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA...

  • CVE-2026-10129

    🚨 CVE-2026-10129 IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API...

  • CVE-2026-10134

    🚨 CVE-2026-10134 IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify...

  • CVE-2026-10140

    🚨 CVE-2026-10140 IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across...

  • CVE-2026-10546

    🚨 CVE-2026-10546 IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component (...

  • CVE-2026-58169

    🚨 CVE-2026-58169 Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass...

  • CVE-2026-58171

    🚨 CVE-2026-58171 Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base...

  • CVE-2026-58172

    🚨 CVE-2026-58172 Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to...

  • CVE-2026-58173

    🚨 CVE-2026-58173 Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended...

  • CVE-2026-58174

    🚨 CVE-2026-58174 Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the...

  • CVE-2026-58176

    🚨 CVE-2026-58176 RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task...

Статистика статей

Статьи
53,092
Просмотры
278,672
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху