CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-35115

    🚨 CVE-2026-35115 HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security (HSTS) header was missing or insecurely...

  • CVE-2026-92080

    🚨 CVE-2026-92080 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software...

  • CVE-2026-21849

    🚨 CVE-2026-21849 HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface. The...

  • CVE-2026-21850

    🚨 CVE-2026-21850 HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper...

  • CVE-2026-35102

    🚨 CVE-2026-35102 HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar component). The...

  • CVE-2026-35103

    🚨 CVE-2026-35103 HCL AION is affected by an open redirect vulnerability on the role assignment pending page (RoleAssignPending component). The...

  • CVE-2026-35105

    🚨 CVE-2026-35105 HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext...

  • CVE-2026-35106

    🚨 CVE-2026-35106 HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext...

  • CVE-2026-35107

    🚨 CVE-2026-35107 HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component). The...

  • CVE-2026-35109

    🚨 CVE-2026-35109 HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies...

  • CVE-2026-35110

    🚨 CVE-2026-35110 HCL AION is affected by a vulnerability where encrypted (HTTPS) communication was not enforced for all requests. Data may be...

  • CVE-2026-35111

    🚨 CVE-2026-35111 HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy (CORP) header was missing or insecure, allowing...

  • CVE-2026-35112

    🚨 CVE-2026-35112 HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy (COEP) header was missing or insecure, so embedded...

  • CVE-2026-35113

    🚨 CVE-2026-35113 HCL AION is affected by a vulnerability where the Cross-Origin-Opener-Policy (COOP) header was missing or insecure, allowing...

  • CVE-2026-5345

    🚨 CVE-2026-5345 HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface...

  • CVE-2026-123339

    🚨 CVE-2026-123339 Improper trust of forwarded headers in RouterListener::onKernelFinishRequest() in Symfony HttpKernel versions prior to 5.4.56...

  • CVE-2026-59105

    🚨 CVE-2026-59105 Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password is derived...

  • CVE-2026-111573

    🚨 CVE-2026-111573 Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission...

Статистика статей

Статьи
53,084
Просмотры
235,818
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху