CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-15183

    🚨 CVE-2026-15183 Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) versions prior to 3.2.1 can allow...

  • CVE-2026-38450

    🚨 CVE-2026-38450 An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and...

  • CVE-2026-42049

    🚨 CVE-2026-42049 jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the...

  • CVE-2026-42447

    🚨 CVE-2026-42447 jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab...

  • CVE-2026-45363

    🚨 CVE-2026-45363 ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(token, ''...

  • CVE-2026-46628

    🚨 CVE-2026-46628 Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing...

  • CVE-2026-46629

    🚨 CVE-2026-46629 Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter instances in...

  • CVE-2026-46633

    🚨 CVE-2026-46633 Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template name from...

  • CVE-2026-46634

    🚨 CVE-2026-46634 Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a...

  • CVE-2026-46635

    🚨 CVE-2026-46635 Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_column(), which reads...

  • CVE-2026-46638

    🚨 CVE-2026-46638 Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previously...

  • CVE-2026-46639

    🚨 CVE-2026-46639 Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles...

  • CVE-2026-46640

    🚨 CVE-2026-46640 Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) and import-alias dynamic attribute syntax can...

  • CVE-2026-47730

    🚨 CVE-2026-47730 Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate() and...

  • CVE-2026-47732

    🚨 CVE-2026-47732 Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a...

  • CVE-2026-48805

    🚨 CVE-2026-48805 Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forward the...

  • CVE-2026-48806

    🚨 CVE-2026-48806 Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to...

  • CVE-2026-48807

    🚨 CVE-2026-48807 Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values...

Статистика статей

Статьи
53,092
Просмотры
271,010
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху