CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-64648

    🚨 CVE-2026-64648 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through...

  • CVE-2026-64649

    🚨 CVE-2026-64649 Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through...

  • CVE-2026-65616

    🚨 CVE-2026-65616 Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

  • CVE-2026-65617

    🚨 CVE-2026-65617 A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality...

  • CVE-2026-65921

    🚨 CVE-2026-65921 A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the...

  • CVE-2026-65922

    🚨 CVE-2026-65922 An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to...

  • CVE-2026-65923

    🚨 CVE-2026-65923 A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access...

  • CVE-2026-65924

    🚨 CVE-2026-65924 JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An...

  • CVE-2026-65925

    🚨 CVE-2026-65925 A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the...

  • CVE-2026-66014

    🚨 CVE-2026-66014 JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions...

  • CVE-2026-66015

    🚨 CVE-2026-66015 An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account...

  • CVE-2026-66018

    🚨 CVE-2026-66018 Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can...

  • CVE-2026-20672

    🚨 CVE-2026-20672 An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS...

  • CVE-2026-28849

    🚨 CVE-2026-28849 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5...

  • CVE-2026-28896

    🚨 CVE-2026-28896 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8...

  • CVE-2026-56748

    🚨 CVE-2026-56748 Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated...

  • CVE-2026-59727

    🚨 CVE-2026-59727 Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a transition:persist...

  • CVE-2026-59729

    🚨 CVE-2026-59729 Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread...

Статистика статей

Статьи
53,087
Просмотры
259,927
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху