CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-63619

    🚨 CVE-2026-63619 Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the...

  • CVE-2026-64610

    🚨 CVE-2026-64610 Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external...

  • CVE-2026-107082

    🚨 CVE-2026-107082 Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the...

  • CVE-2026-111059

    🚨 CVE-2026-111059 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11...

  • CVE-2026-111066

    🚨 CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request...

  • CVE-2026-112159

    🚨 CVE-2026-112159 A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the...

  • CVE-2026-11831

    🚨 CVE-2026-11831 IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about...

  • CVE-2026-14511

    🚨 CVE-2026-14511 IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted...

  • CVE-2023-38375

    🚨 CVE-2023-38375 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed...

  • CVE-2026-111757

    🚨 CVE-2026-111757 Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can...

  • CVE-2026-112247

    🚨 CVE-2026-112247 A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up...

  • CVE-2026-3303

    🚨 CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged...

  • CVE-2026-109437

    🚨 CVE-2026-109437 Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox...

  • CVE-2026-112252

    🚨 CVE-2026-112252 A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information...

  • CVE-2026-112772

    🚨 CVE-2026-112772 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users...

  • CVE-2026-112777

    🚨 CVE-2026-112777 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its...

  • CVE-2026-112782

    🚨 CVE-2026-112782 Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous...

  • CVE-2026-71169

    🚨 CVE-2026-71169 Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху