CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-65926

    🚨 CVE-2026-65926 An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle...

  • CVE-2026-65937

    🚨 CVE-2026-65937 In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent...

  • CVE-2026-65938

    🚨 CVE-2026-65938 In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows...

  • CVE-2026-65939

    🚨 CVE-2026-65939 In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary...

  • CVE-2026-65940

    🚨 CVE-2026-65940 In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location...

  • CVE-2026-65941

    🚨 CVE-2026-65941 In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service...

  • CVE-2026-66016

    🚨 CVE-2026-66016 Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to...

  • CVE-2026-66384

    🚨 CVE-2026-66384 An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

  • CVE-2026-67260

    🚨 CVE-2026-67260 Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the...

  • CVE-2026-67587

    🚨 CVE-2026-67587 Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the...

  • CVE-2026-68076

    🚨 CVE-2026-68076 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope...

  • CVE-2026-68758

    🚨 CVE-2026-68758 A low-privileged authenticated user may access restricted support information under specific conditions.

  • CVE-2026-68759

    🚨 CVE-2026-68759 A holder of a valid integration credential may impersonate other users under specific conditions.

  • CVE-2026-68968

    🚨 CVE-2026-68968 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path...

  • CVE-2026-68969

    🚨 CVE-2026-68969 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted...

  • CVE-2026-68970

    🚨 CVE-2026-68970 Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape...

  • CVE-2026-68971

    🚨 CVE-2026-68971 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on...

  • CVE-2026-69105

    🚨 CVE-2026-69105 An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting...

Статистика статей

Статьи
53,088
Просмотры
264,220
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху