CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105949

    🚨 CVE-2026-105949 Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard...

  • CVE-2026-113385

    🚨 CVE-2026-113385 A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function...

  • CVE-2026-113388

    🚨 CVE-2026-113388 A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file...

  • CVE-2026-113389

    🚨 CVE-2026-113389 A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function...

  • CVE-2026-113495

    🚨 CVE-2026-113495 A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line...

  • CVE-2026-113496

    🚨 CVE-2026-113496 A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is...

  • CVE-2026-113583

    🚨 CVE-2026-113583 Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to...

  • CVE-2026-14933

    🚨 CVE-2026-14933 Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on...

  • CVE-2026-18205

    🚨 CVE-2026-18205 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics...

  • CVE-2026-70411

    🚨 CVE-2026-70411 Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function...

  • CVE-2026-73179

    🚨 CVE-2026-73179 Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache...

  • CVE-2026-86463

    🚨 CVE-2026-86463 Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can...

  • CVE-2026-79650

    🚨 CVE-2026-79650 Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The...

  • CVE-2026-97468

    🚨 CVE-2026-97468 Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit...

  • CVE-2026-97791

    🚨 CVE-2026-97791 In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to...

  • CVE-2026-102855

    🚨 CVE-2026-102855 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  • CVE-2026-108426

    🚨 CVE-2026-108426 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-108427

    🚨 CVE-2026-108427 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Статистика статей

Статьи
53,084
Просмотры
238,885
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху