CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-9585

    🚨 CVE-2026-9585 An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3...

  • CVE-2026-9586

    🚨 CVE-2026-9586 An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes...

  • CVE-2026-9587

    🚨 CVE-2026-9587 An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file...

  • CVE-2026-50273

    🚨 CVE-2026-50273 Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that...

  • CVE-2026-9198

    🚨 CVE-2026-9198 IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any...

  • CVE-2026-9202

    🚨 CVE-2026-9202 IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance...

  • CVE-2026-9762

    🚨 CVE-2026-9762 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

  • CVE-2026-16073

    🚨 CVE-2026-16073 A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function...

  • CVE-2026-45309

    🚨 CVE-2026-45309 AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the...

  • CVE-2026-49835

    🚨 CVE-2026-49835 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware...

  • CVE-2026-50185

    🚨 CVE-2026-50185 RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and...

  • CVE-2026-52746

    🚨 CVE-2026-52746 JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis...

  • CVE-2026-53712

    🚨 CVE-2026-53712 SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer...

  • CVE-2026-58195

    🚨 CVE-2026-58195 Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in...

  • CVE-2026-9103

    🚨 CVE-2026-9103 IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in...

  • CVE-2026-9135

    🚨 CVE-2026-9135 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a...

  • CVE-2026-9171

    🚨 CVE-2026-9171 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending...

  • CVE-2026-12283

    🚨 CVE-2026-12283 Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL...

Статистика статей

Статьи
53,091
Просмотры
267,014
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху