CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-54384

    🚨 CVE-2026-54384 VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a...

  • CVE-2026-122301

    🚨 CVE-2026-122301 Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 returns field values in object create responses to callers that lack...

  • CVE-2026-122302

    🚨 CVE-2026-122302 Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond...

  • CVE-2026-122303

    🚨 CVE-2026-122303 Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite...

  • CVE-2026-122304

    🚨 CVE-2026-122304 Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape...

  • CVE-2026-122305

    🚨 CVE-2026-122305 Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to...

  • CVE-2026-122306

    🚨 CVE-2026-122306 Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission...

  • CVE-2026-122307

    🚨 CVE-2026-122307 Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds...

  • CVE-2026-122308

    🚨 CVE-2026-122308 Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with...

  • CVE-2026-122309

    🚨 CVE-2026-122309 Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and...

  • CVE-2026-122310

    🚨 CVE-2026-122310 Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path...

  • CVE-2026-122311

    🚨 CVE-2026-122311 Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and...

  • CVE-2026-122312

    🚨 CVE-2026-122312 Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go...

  • CVE-2026-122313

    🚨 CVE-2026-122313 Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify...

  • CVE-2026-122315

    🚨 CVE-2026-122315 Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash...

  • CVE-2026-122316

    🚨 CVE-2026-122316 Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor...

  • CVE-2026-122318

    🚨 CVE-2026-122318 Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and...

  • CVE-2026-122319

    🚨 CVE-2026-122319 Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash...

Статистика статей

Статьи
53,082
Просмотры
202,951
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху