CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-49343

    🚨 CVE-2026-49343 Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers...

  • CVE-2026-52879

    🚨 CVE-2026-52879 Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message...

  • CVE-2026-52880

    🚨 CVE-2026-52880 Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a...

  • CVE-2026-67620

    🚨 CVE-2026-67620 Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts...

  • CVE-2026-69659

    🚨 CVE-2026-69659 Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a...

  • CVE-2026-70395

    🚨 CVE-2026-70395 Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a...

  • CVE-2026-57279

    🚨 CVE-2026-57279 Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be...

  • CVE-2026-64940

    🚨 CVE-2026-64940 Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression...

  • CVE-2026-55799

    🚨 CVE-2026-55799 Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to...

  • CVE-2026-55814

    🚨 CVE-2026-55814 Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to upgrade to version 2.9.0...

  • CVE-2026-61899

    🚨 CVE-2026-61899 Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via...

  • CVE-2026-65942

    🚨 CVE-2026-65942 TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are recommended to upgrade to version...

  • CVE-2026-65945

    🚨 CVE-2026-65945 Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which...

  • CVE-2026-65948

    🚨 CVE-2026-65948 UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT a recommended option for...

  • CVE-2026-66484

    🚨 CVE-2026-66484 GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in...

  • CVE-2026-66484

    🚨 CVE-2026-66485 GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca...

  • CVE-2026-66484

    🚨 CVE-2026-66486 GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing...

  • CVE-2026-64941

    🚨 CVE-2026-64941 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to...

Статистика статей

Статьи
53,088
Просмотры
263,731
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху