CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-73228

    🚨 CVE-2026-73228 Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing in...

  • CVE-2026-71467

    🚨 CVE-2026-71467 A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication...

  • CVE-2026-71468

    🚨 CVE-2026-71468 A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a...

  • CVE-2026-71474

    🚨 CVE-2026-71474 A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can...

  • CVE-2026-71475

    🚨 CVE-2026-71475 A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the...

  • CVE-2026-71845

    🚨 CVE-2026-71845 A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes...

  • CVE-2026-73031

    🚨 CVE-2026-73031 telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript...

  • CVE-2026-73032

    🚨 CVE-2026-73032 PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript...

  • CVE-2026-73034

    🚨 CVE-2026-73034 DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to...

  • CVE-2026-73229

    🚨 CVE-2026-73229 Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's...

  • CVE-2026-73231

    🚨 CVE-2026-73231 Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in...

  • CVE-2026-73243

    🚨 CVE-2026-73243 kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask...

  • CVE-2026-73244

    🚨 CVE-2026-73244 kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles...

  • CVE-2026-73281

    🚨 CVE-2026-73281 In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including...

  • CVE-2026-73282

    🚨 CVE-2026-73282 In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are...

  • CVE-2026-73283

    🚨 CVE-2026-73283 In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but...

  • CVE-2026-73245

    🚨 CVE-2026-73245 Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's...

  • CVE-2026-73246

    🚨 CVE-2026-73246 Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's...

Статистика статей

Статьи
53,087
Просмотры
262,891
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху