CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-4412

    🚨 CVE-2024-4412 The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language...

  • CVE-2025-10149

    🚨 CVE-2025-10149 The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local...

  • CVE-2025-13173

    🚨 CVE-2025-13173 Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO...

  • CVE-2025-13591

    🚨 CVE-2025-13591 The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist...

  • CVE-2025-6623

    🚨 CVE-2025-6623 The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the...

  • CVE-2025-7203

    🚨 CVE-2025-7203 The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and...

  • CVE-2026-103038

    🚨 CVE-2026-103038 PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The...

  • CVE-2026-107187

    🚨 CVE-2026-107187 A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule...

  • CVE-2026-107188

    🚨 CVE-2026-107188 A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be...

  • CVE-2026-105810

    🚨 CVE-2026-105810 Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An...

  • CVE-2026-76787

    🚨 CVE-2026-76787 The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe()...

  • CVE-2026-76788

    🚨 CVE-2026-76788 The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral...

  • CVE-2026-107186

    🚨 CVE-2026-107186 An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set...

  • CVE-2026-105815

    🚨 CVE-2026-105815 TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API...

  • CVE-2026-53995

    🚨 CVE-2026-53995 MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated...

  • CVE-2026-112991

    🚨 CVE-2026-112991 The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its...

  • CVE-2026-19595

    🚨 CVE-2026-19595 The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output...

  • CVE-2026-77684

    🚨 CVE-2026-77684 The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command...

Статистика статей

Статьи
53,084
Просмотры
241,644
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху