CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-59841

    🚨 CVE-2026-59841 A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0...

  • CVE-2026-60081

    🚨 CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used...

  • CVE-2026-60082

    🚨 CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no...

  • CVE-2026-60118

    🚨 CVE-2026-60118 Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers...

  • CVE-2026-60119

    🚨 CVE-2026-60119 Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or...

  • CVE-2026-62641

    🚨 CVE-2026-62641 In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted...

  • CVE-2026-62643

    🚨 CVE-2026-62643 In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail...

  • CVE-2026-62644

    🚨 CVE-2026-62644 In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username...

  • CVE-2026-7494

    🚨 CVE-2026-7494 Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding...

  • CVE-2026-9108

    🚨 CVE-2026-9108 A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD...

  • CVE-2026-9127

    🚨 CVE-2026-9127 A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration...

  • CVE-2026-9128

    🚨 CVE-2026-9128 A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools...

  • CVE-2026-9292

    🚨 CVE-2026-9292 A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from...

  • CVE-2026-9636

    🚨 CVE-2026-9636 A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security...

  • CVE-2026-14645

    🚨 CVE-2026-14645 Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an...

  • CVE-2026-14646

    🚨 CVE-2026-14646 Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by...

  • CVE-2026-15427

    🚨 CVE-2026-15427 An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient...

  • CVE-2026-15428

    🚨 CVE-2026-15428 An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name...

Статистика статей

Статьи
53,092
Просмотры
269,249
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху