CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-15135

    🚨 CVE-2026-15135 A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file...

  • CVE-2026-15137

    🚨 CVE-2026-15137 A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the...

  • CVE-2026-47646

    🚨 CVE-2026-47646 Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an...

  • CVE-2026-15138

    🚨 CVE-2026-15138 A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function...

  • CVE-2026-41857

    🚨 CVE-2026-41857 A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator...

  • CVE-2026-5523

    🚨 CVE-2026-5523 The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is...

  • CVE-2026-47826

    🚨 CVE-2026-47826 The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate...

  • CVE-2026-47828

    🚨 CVE-2026-47828 During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV...

  • CVE-2026-47829

    🚨 CVE-2026-47829 Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned...

  • CVE-2026-47830

    🚨 CVE-2026-47830 Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege...

  • CVE-2026-47831

    🚨 CVE-2026-47831 Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder...

  • CVE-2026-31985

    🚨 CVE-2026-31985 When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS...

  • CVE-2026-57111

    🚨 CVE-2026-57111 Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFilter) in...

  • CVE-2026-59269

    🚨 CVE-2026-59269 A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in the...

  • CVE-2026-1365

    🚨 CVE-2026-1365 Insertion of sensitive information into sent data vulnerability in Sayax Energy Technologies Inc. OSOS allows Authentication...

  • CVE-2026-1989

    🚨 CVE-2026-1989 Authorization bypass through User-Controlled key vulnerability in PAVO Financial Technology Solutions Inc. PAVO Pay allows...

  • CVE-2026-2342

    🚨 CVE-2026-2342 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OceanicSoft Informatics...

  • CVE-2026-56458

    🚨 CVE-2026-56458 HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and...

Статистика статей

Статьи
53,092
Просмотры
276,402
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху