CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-6623

    🚨 CVE-2025-6623 The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the...

  • CVE-2025-7043

    🚨 CVE-2025-7043 The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access...

  • CVE-2025-7203

    🚨 CVE-2025-7203 The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and...

  • CVE-2026-103038

    🚨 CVE-2026-103038 PingTools Network Utilities 4.64 Free accepts an arbitrary value in the Host field of a Watcher ICMP service, incorporating that...

  • CVE-2026-107082

    🚨 CVE-2026-107082 Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the...

  • CVE-2026-107083

    🚨 CVE-2026-107083 SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in...

  • CVE-2026-107186

    🚨 CVE-2026-107186 An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set...

  • CVE-2026-107188

    🚨 CVE-2026-107188 A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be...

  • CVE-2026-10572

    🚨 CVE-2026-10572 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap...

  • CVE-2026-10574

    🚨 CVE-2026-10574 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap...

  • CVE-2026-10743

    🚨 CVE-2026-10743 IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer...

  • CVE-2026-111059

    🚨 CVE-2026-111059 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11...

  • CVE-2026-111061

    🚨 CVE-2026-111061 russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent...

  • CVE-2026-111063

    🚨 CVE-2026-111063 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a...

  • CVE-2026-111064

    🚨 CVE-2026-111064 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is...

  • CVE-2026-111065

    🚨 CVE-2026-111065 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow...

  • CVE-2026-111066

    🚨 CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request...

  • CVE-2026-111748

    🚨 CVE-2026-111748 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an...

Статистика статей

Статьи
53,082
Просмотры
221,331
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху