CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-45820

    🚨 CVE-2026-45820 fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central...

  • CVE-2026-63047

    🚨 CVE-2026-63047 Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The...

  • CVE-2026-63264

    🚨 CVE-2026-63264 Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vulnerable to...

  • CVE-2026-14551

    🚨 CVE-2026-14551 The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are vulnerable...

  • CVE-2026-16544

    🚨 CVE-2026-16544 A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in...

  • CVE-2026-16551

    🚨 CVE-2026-16551 Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects...

  • CVE-2026-44187

    🚨 CVE-2026-44187 A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local...

  • CVE-2026-44190

    🚨 CVE-2026-44190 A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a...

  • CVE-2026-44192

    🚨 CVE-2026-44192 A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal...

  • CVE-2026-4773

    🚨 CVE-2026-4773 Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authentication Bypass...

  • CVE-2026-57599

    🚨 CVE-2026-57599 There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device...

  • CVE-2026-65014

    🚨 CVE-2026-65014 n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoint before...

  • CVE-2026-65015

    🚨 CVE-2026-65015 n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool...

  • CVE-2026-65016

    🚨 CVE-2026-65016 n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance-role...

  • CVE-2026-65589

    🚨 CVE-2026-65589 n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing...

  • CVE-2026-65590

    🚨 CVE-2026-65590 n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the...

  • CVE-2026-65591

    🚨 CVE-2026-65591 n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user...

  • CVE-2026-65592

    🚨 CVE-2026-65592 n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator...

Статистика статей

Статьи
53,088
Просмотры
264,561
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху