CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-15556

    🚨 CVE-2026-15556 A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the...

  • CVE-2026-15560

    🚨 CVE-2026-15560 when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling...

  • CVE-2026-15561

    🚨 CVE-2026-15561 A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to...

  • CVE-2026-15562

    🚨 CVE-2026-15562 A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete...

  • CVE-2026-15563

    🚨 CVE-2026-15563 A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an...

  • CVE-2026-15565

    🚨 CVE-2026-15565 A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any...

  • CVE-2026-15567

    🚨 CVE-2026-15567 A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder...

  • CVE-2026-14180

    🚨 CVE-2026-14180 A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle...

  • CVE-2026-5680

    🚨 CVE-2026-5680 A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages...

  • CVE-2026-84268

    🚨 CVE-2026-84268 A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause...

  • CVE-2026-86404

    🚨 CVE-2026-86404 EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject() uses...

  • CVE-2026-88924

    🚨 CVE-2026-88924 A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private...

  • CVE-2026-10832

    🚨 CVE-2026-10832 A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion...

  • CVE-2026-85511

    🚨 CVE-2026-85511 A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with...

  • CVE-2026-101292

    🚨 CVE-2026-101292 Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in...

  • CVE-2026-107809

    🚨 CVE-2026-107809 Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token...

  • CVE-2026-107810

    🚨 CVE-2026-107810 Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner...

  • CVE-2026-111862

    🚨 CVE-2026-111862 Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or...

Статистика статей

Статьи
53,084
Просмотры
239,652
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху