CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123848

    🚨 CVE-2026-123848 In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

  • CVE-2026-123849

    🚨 CVE-2026-123849 In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers

  • CVE-2026-123850

    🚨 CVE-2026-123850 In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives

  • CVE-2026-123851

    🚨 CVE-2026-123851 In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

  • CVE-2026-123852

    🚨 CVE-2026-123852 In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

  • CVE-2026-123853

    🚨 CVE-2026-123853 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options...

  • CVE-2026-123854

    🚨 CVE-2026-123854 In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module

  • CVE-2026-123855

    🚨 CVE-2026-123855 In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs

  • CVE-2026-123856

    🚨 CVE-2026-123856 In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server

  • CVE-2026-123857

    🚨 CVE-2026-123857 In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection

  • CVE-2026-123858

    🚨 CVE-2026-123858 In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects

  • CVE-2026-123962

    🚨 CVE-2026-123962 In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the...

  • CVE-2026-49951

    🚨 CVE-2026-49951 RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force the...

  • CVE-2026-62850

    🚨 CVE-2026-62850 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrative tools.php maintenance endpoint is...

  • CVE-2026-62851

    🚨 CVE-2026-62851 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, the search-by-number shortcut in...

  • CVE-2026-62852

    🚨 CVE-2026-62852 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, RealtimeConvNewThread checks only general mailbox...

  • CVE-2026-62854

    🚨 CVE-2026-62854 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, a user who can edit a mailbox signature can combine a...

  • CVE-2026-62855

    🚨 CVE-2026-62855 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrator-only App Logs viewer accepts...

Статистика статей

Статьи
53,084
Просмотры
231,620
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху