CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66778

    🚨 CVE-2026-66778 SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An...

  • CVE-2026-66779

    🚨 CVE-2026-66779 Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could...

  • CVE-2026-5303

    🚨 CVE-2026-5303 The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege...

  • CVE-2026-5304

    🚨 CVE-2026-5304 An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can...

  • CVE-2026-6181

    🚨 CVE-2026-6181 The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after...

  • CVE-2026-6505

    🚨 CVE-2026-6505 The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege...

  • CVE-2026-58231

    🚨 CVE-2026-58231 SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input...

  • CVE-2026-50237

    🚨 CVE-2026-50237 A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can...

  • CVE-2026-51583

    🚨 CVE-2026-51583 An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the...

  • CVE-2026-53413

    🚨 CVE-2026-53413 Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to...

  • CVE-2026-53414

    🚨 CVE-2026-53414 Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to...

  • CVE-2026-53415

    🚨 CVE-2026-53415 Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of...

  • CVE-2026-53416

    🚨 CVE-2026-53416 Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.

  • CVE-2026-56720

    🚨 CVE-2026-56720 CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows...

  • CVE-2026-56721

    🚨 CVE-2026-56721 CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR)...

  • CVE-2026-67179

    🚨 CVE-2026-67179 Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits...

  • CVE-2026-67180

    🚨 CVE-2026-67180 Google Turbinia allows arbitrary command execution via worker tasks. An attacker with privileges to submit a processing request...

  • CVE-2026-6726

    🚨 CVE-2026-6726 An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with...

Статистика статей

Статьи
53,088
Просмотры
263,731
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху