CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-54470

    🚨 CVE-2026-54470 Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference...

  • CVE-2026-56813

    🚨 CVE-2026-56813 Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or...

  • CVE-2026-58661

    🚨 CVE-2026-58661 n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file...

  • CVE-2026-59791

    🚨 CVE-2026-59791 In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible

  • CVE-2026-59792

    🚨 CVE-2026-59792 In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible

  • CVE-2026-59793

    🚨 CVE-2026-59793 In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

  • CVE-2026-59794

    🚨 CVE-2026-59794 In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

  • CVE-2026-59795

    🚨 CVE-2026-59795 In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

  • CVE-2026-59796

    🚨 CVE-2026-59796 In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

  • CVE-2026-60086

    🚨 CVE-2026-60086 PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats...

  • CVE-2026-60091

    🚨 CVE-2026-60091 PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs...

  • CVE-2026-61431

    🚨 CVE-2026-61431 PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in...

  • CVE-2026-61432

    🚨 CVE-2026-61432 PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature...

  • CVE-2026-61434

    🚨 CVE-2026-61434 PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to...

  • CVE-2026-115995

    🚨 CVE-2026-115995 A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function...

  • CVE-2026-115996

    🚨 CVE-2026-115996 A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function...

  • CVE-2026-115997

    🚨 CVE-2026-115997 A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file...

  • CVE-2025-60493

    🚨 CVE-2025-60493 A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows...

Статистика статей

Статьи
53,092
Просмотры
271,555
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху