CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112021

    🚨 CVE-2026-112021 snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated...

  • CVE-2026-103314

    🚨 CVE-2026-103314 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does...

  • CVE-2026-107081

    🚨 CVE-2026-107081 SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints...

  • CVE-2026-107566

    🚨 CVE-2026-107566 Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0...

  • CVE-2026-107567

    🚨 CVE-2026-107567 Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote...

  • CVE-2026-107568

    🚨 CVE-2026-107568 Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6)...

  • CVE-2026-107569

    🚨 CVE-2026-107569 Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated...

  • CVE-2026-109431

    🚨 CVE-2026-109431 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task...

  • CVE-2026-109432

    🚨 CVE-2026-109432 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where...

  • CVE-2026-109433

    🚨 CVE-2026-109433 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp...

  • CVE-2026-111045

    🚨 CVE-2026-111045 CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace...

  • CVE-2026-111046

    🚨 CVE-2026-111046 FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for...

  • CVE-2026-111053

    🚨 CVE-2026-111053 FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated...

  • CVE-2026-111056

    🚨 CVE-2026-111056 FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST...

  • CVE-2026-111057

    🚨 CVE-2026-111057 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a...

  • CVE-2026-111058

    🚨 CVE-2026-111058 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default...

  • CVE-2026-112152

    🚨 CVE-2026-112152 A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4...

  • CVE-2026-112153

    🚨 CVE-2026-112153 A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects...

Статистика статей

Статьи
53,082
Просмотры
220,230
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху