CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121623

    🚨 CVE-2026-121623 The Symfony Serializer component DataUriNormalizer::denormalize() matches the data: scheme with a case-sensitive regular...

  • CVE-2026-121880

    🚨 CVE-2026-121880 Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server...

  • CVE-2026-121881

    🚨 CVE-2026-121881 SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit Software, PBC Posit Workbench before...

  • CVE-2026-123623

    🚨 CVE-2026-123623 Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows...

  • CVE-2026-123675

    🚨 CVE-2026-123675 A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function...

  • CVE-2026-123676

    🚨 CVE-2026-123676 A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function...

  • CVE-2026-123677

    🚨 CVE-2026-123677 A vulnerability was found in xxyopen/201206030 novel up to 3.5.0. Affected is the function getBookChapter of the file...

  • CVE-2026-123792

    🚨 CVE-2026-123792 The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted document can...

  • CVE-2026-21834

    🚨 CVE-2026-21834 HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security response header was missing from...

  • CVE-2026-58141

    🚨 CVE-2026-58141 Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF...

  • CVE-2026-66981

    🚨 CVE-2026-66981 HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in requests...

  • CVE-2026-66982

    🚨 CVE-2026-66982 HCL AION is affected by a vulnerability where browser autocomplete was enabled on sensitive login form fields, allowing the...

  • CVE-2026-66984

    🚨 CVE-2026-66984 HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This...

  • CVE-2026-66986

    🚨 CVE-2026-66986 HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended...

  • CVE-2026-66987

    🚨 CVE-2026-66987 HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login...

  • CVE-2026-80301

    🚨 CVE-2026-80301 Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access...

  • CVE-2026-80302

    🚨 CVE-2026-80302 Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker...

  • CVE-2026-80303

    🚨 CVE-2026-80303 An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial of...

Статистика статей

Статьи
53,084
Просмотры
235,818
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху