CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-106019

    🚨 CVE-2026-106019 Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known...

  • CVE-2026-106020

    🚨 CVE-2026-106020 Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools...

  • CVE-2026-106022

    🚨 CVE-2026-106022 Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer...

  • CVE-2026-112334

    🚨 CVE-2026-112334 Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged...

  • CVE-2026-112335

    🚨 CVE-2026-112335 Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that...

  • CVE-2026-112336

    🚨 CVE-2026-112336 Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote...

  • CVE-2026-112337

    🚨 CVE-2026-112337 Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle get_graph_events()...

  • CVE-2026-112338

    🚨 CVE-2026-112338 Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module (wm_github.c) that...

  • CVE-2026-112340

    🚨 CVE-2026-112340 Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated...

  • CVE-2026-112341

    🚨 CVE-2026-112341 Wazuh versions from 4.0.0 before 4.14.9 contain a sql injection vulnerability in WazuhDBBackend._substitute_params due to...

  • CVE-2026-113618

    🚨 CVE-2026-113618 The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a...

  • CVE-2026-118514

    🚨 CVE-2026-118514 In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11...

  • CVE-2026-119170

    🚨 CVE-2026-119170 There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS...

  • CVE-2026-123339

    🚨 CVE-2026-123339 Improper trust of forwarded headers in RouterListener::onKernelFinishRequest() in Symfony HttpKernel versions prior to 5.4.56...

  • CVE-2026-123485

    🚨 CVE-2026-123485 Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as...

  • CVE-2026-123486

    🚨 CVE-2026-123486 WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to...

  • CVE-2026-123487

    🚨 CVE-2026-123487 Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address format with a regular expression whose...

  • CVE-2026-123488

    🚨 CVE-2026-123488 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element...

Статистика статей

Статьи
53,084
Просмотры
238,025
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху