CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112861

    🚨 CVE-2026-112861 Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database...

  • CVE-2026-113506

    🚨 CVE-2026-113506 A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file...

  • CVE-2026-113507

    🚨 CVE-2026-113507 A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file...

  • CVE-2026-100132

    🚨 CVE-2026-100132 Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An...

  • CVE-2026-100134

    🚨 CVE-2026-100134 Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the...

  • CVE-2026-111088

    🚨 CVE-2026-111088 A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.

  • CVE-2026-113808

    🚨 CVE-2026-113808 A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can...

  • CVE-2026-113810

    🚨 CVE-2026-113810 A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can...

  • CVE-2026-97406

    🚨 CVE-2026-97406 XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation...

  • CVE-2026-10579

    🚨 CVE-2026-10579 A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no...

  • CVE-2026-15556

    🚨 CVE-2026-15556 A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the...

  • CVE-2026-15561

    🚨 CVE-2026-15561 A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to...

  • CVE-2026-15563

    🚨 CVE-2026-15563 A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an...

  • CVE-2026-15565

    🚨 CVE-2026-15565 A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any...

  • CVE-2026-15567

    🚨 CVE-2026-15567 A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder...

  • CVE-2026-84975

    🚨 CVE-2026-84975 PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS...

  • CVE-2026-96652

    🚨 CVE-2026-96652 Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a...

  • CVE-2026-96654

    🚨 CVE-2026-96654 Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to...

Статистика статей

Статьи
53,084
Просмотры
241,644
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху