CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-79985

    🚨 CVE-2026-79985 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component...

  • CVE-2026-79986

    🚨 CVE-2026-79986 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files...

  • CVE-2026-83531

    🚨 CVE-2026-83531 Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression...

  • CVE-2026-40860

    🚨 CVE-2026-88900 Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from...

  • CVE-2026-10572

    🚨 CVE-2026-10572 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap...

  • CVE-2026-10574

    🚨 CVE-2026-10574 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap...

  • CVE-2026-10743

    🚨 CVE-2026-10743 IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer...

  • CVE-2026-12148

    🚨 CVE-2026-12148 IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to...

  • CVE-2026-12665

    🚨 CVE-2026-12665 IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates...

  • CVE-2023-6394

    🚨 CVE-2023-6394 A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on...

  • CVE-2024-12397

    🚨 CVE-2024-12397 A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests...

  • CVE-2025-1247

    🚨 CVE-2025-1247 A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field...

  • CVE-2025-1634

    🚨 CVE-2025-1634 A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If...

  • CVE-2025-2240

    🚨 CVE-2025-2240 A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is...

  • CVE-2025-14969

    🚨 CVE-2025-14969 A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can...

  • CVE-2026-9800

    🚨 CVE-2026-9800 A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization...

  • CVE-2026-12894

    🚨 CVE-2026-12894 A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails. The...

  • CVE-2026-76763

    🚨 CVE-2026-76763 A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float...

Статистика статей

Статьи
53,084
Просмотры
238,885
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху