CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-59233

    🚨 CVE-2026-59233 Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authenticated...

  • CVE-2026-6373

    🚨 CVE-2026-6373 Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web...

  • CVE-2026-6374

    🚨 CVE-2026-6374 Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This...

  • CVE-2026-63106

    🚨 CVE-2026-63106 ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating...

  • CVE-2026-56620

    🚨 CVE-2026-56620 HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.

  • CVE-2026-56619

    🚨 CVE-2026-56619 HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output...

  • CVE-2026-68870

    🚨 CVE-2026-68870 The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id...

  • CVE-2026-68871

    🚨 CVE-2026-68871 The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through...

  • CVE-2026-68872

    🚨 CVE-2026-68872 The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped...

  • CVE-2026-6791

    🚨 CVE-2026-6791 When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username...

  • CVE-2026-69112

    🚨 CVE-2026-69112 Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and...

  • CVE-2026-69116

    🚨 CVE-2026-69116 FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives...

  • CVE-2026-69118

    🚨 CVE-2026-69118 Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows...

  • CVE-2026-58230

    🚨 CVE-2026-58230 SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker...

  • CVE-2026-58235

    🚨 CVE-2026-58235 SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer...

  • CVE-2026-58236

    🚨 CVE-2026-58236 SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security...

  • CVE-2026-58237

    🚨 CVE-2026-58237 WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low...

  • CVE-2026-58238

    🚨 CVE-2026-58238 SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send...

Статистика статей

Статьи
53,088
Просмотры
263,731
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху