CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-43842

    🚨 CVE-2026-43842 A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the...

  • CVE-2026-43843

    🚨 CVE-2026-43843 An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

  • CVE-2026-112067

    🚨 CVE-2026-112067 The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a...

  • CVE-2026-112068

    🚨 CVE-2026-112068 The backend module does not check whether a backend user has access to the requested site. Users with access to the module can...

  • CVE-2026-112237

    🚨 CVE-2026-112237 The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the...

  • CVE-2026-43854

    🚨 CVE-2026-43854 A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for...

  • CVE-2026-43855

    🚨 CVE-2026-43855 A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

  • CVE-2026-85267

    🚨 CVE-2026-85267 A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an...

  • CVE-2026-108086

    🚨 CVE-2026-108086 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')...

  • CVE-2026-108087

    🚨 CVE-2026-108087 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection')...

  • CVE-2026-108088

    🚨 CVE-2026-108088 ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the...

  • CVE-2026-108089

    🚨 CVE-2026-108089 ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in...

  • CVE-2026-113470

    🚨 CVE-2026-113470 Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients...

  • CVE-2026-101296

    🚨 CVE-2026-101296 A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non...

  • CVE-2026-101356

    🚨 CVE-2026-101356 Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can...

  • CVE-2026-103119

    🚨 CVE-2026-103119 Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being...

  • CVE-2026-74048

    🚨 CVE-2026-74048 Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS...

  • CVE-2026-74049

    🚨 CVE-2026-74049 Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through...

Статистика статей

Статьи
53,084
Просмотры
241,056
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху