CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-70436

    🚨 CVE-2026-70436 Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs...

  • CVE-2026-70437

    🚨 CVE-2026-70437 Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function...

  • CVE-2026-70438

    🚨 CVE-2026-70438 A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read...

  • CVE-2026-70439

    🚨 CVE-2026-70439 Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate...

  • CVE-2026-70440

    🚨 CVE-2026-70440 Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a...

  • CVE-2026-70441

    🚨 CVE-2026-70441 Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages...

  • CVE-2026-70442

    🚨 CVE-2026-70442 Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials...

  • CVE-2026-70443

    🚨 CVE-2026-70443 Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup...

  • CVE-2026-70444

    🚨 CVE-2026-70444 A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read...

  • CVE-2026-70445

    🚨 CVE-2026-70445 Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to...

  • CVE-2026-70446

    🚨 CVE-2026-70446 Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate...

  • CVE-2026-70447

    🚨 CVE-2026-70447 Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to...

  • CVE-2026-63457

    🚨 CVE-2026-63457 A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.

  • CVE-2026-70431

    🚨 CVE-2026-70431 Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script...

  • CVE-2026-70432

    🚨 CVE-2026-70432 A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to...

  • CVE-2026-70433

    🚨 CVE-2026-70433 Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to...

  • CVE-2026-70434

    🚨 CVE-2026-70434 A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to...

  • CVE-2026-70435

    🚨 CVE-2026-70435 A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to...

Статистика статей

Статьи
53,088
Просмотры
263,320
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху