CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-88041

    🚨 CVE-2026-88041 Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a...

  • CVE-2026-93446

    🚨 CVE-2026-93446 Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects...

  • CVE-2026-107755

    🚨 CVE-2026-107755 Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an...

  • CVE-2026-113605

    🚨 CVE-2026-113605 Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows...

  • CVE-2026-113610

    🚨 CVE-2026-113610 Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allows...

  • CVE-2026-113677

    🚨 CVE-2026-113677 Froxlor from 0.10.0 before 2.3.15 contains a missing authorization vulnerability in the SubDomains.delete API command that...

  • CVE-2026-86471

    🚨 CVE-2026-86471 An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to...

  • CVE-2026-90797

    🚨 CVE-2026-90797 An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to...

  • CVE-2026-90798

    🚨 CVE-2026-90798 A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication...

  • CVE-2026-90800

    🚨 CVE-2026-90800 Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full...

  • CVE-2026-28328

    🚨 CVE-2026-28328 SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged...

  • CVE-2026-28329

    🚨 CVE-2026-28329 SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows...

  • CVE-2026-28330

    🚨 CVE-2026-28330 SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows...

  • CVE-2026-92539

    🚨 CVE-2026-92539 A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to...

  • CVE-2026-105772

    🚨 CVE-2026-105772 Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a...

  • CVE-2026-113506

    🚨 CVE-2026-113506 A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file...

  • CVE-2026-113662

    🚨 CVE-2026-113662 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated...

  • CVE-2026-113668

    🚨 CVE-2026-113668 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET...

Статистика статей

Статьи
53,084
Просмотры
241,056
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху