CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118147

    🚨 CVE-2026-118147 Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

  • CVE-2026-118394

    🚨 CVE-2026-118394 The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public organizations by...

  • CVE-2026-119625

    🚨 CVE-2026-119625 The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their scope. A token...

  • CVE-2026-119627

    🚨 CVE-2026-119627 The web profile and RSS/Atom feed routes of users and organizations checked only whether a signed-in viewer could see a...

  • CVE-2026-74759

    🚨 CVE-2026-74759 Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external...

  • CVE-2026-74760

    🚨 CVE-2026-74760 Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth...

  • CVE-2026-82115

    🚨 CVE-2026-82115 Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, the request handler...

  • CVE-2026-82557

    🚨 CVE-2026-82557 Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a form...

  • CVE-2026-82558

    🚨 CVE-2026-82558 Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wicket's native...

  • CVE-2026-82559

    🚨 CVE-2026-82559 Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocketRequest() wraps...

  • CVE-2026-82704

    🚨 CVE-2026-82704 Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.ListenerRequestHandler invokes an...

  • CVE-2026-82705

    🚨 CVE-2026-82705 Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized()...

  • CVE-2026-82840

    🚨 CVE-2026-82840 Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authentication base...

  • CVE-2026-82898

    🚨 CVE-2026-82898 Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener...

  • CVE-2026-111089

    🚨 CVE-2026-111089 Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes some of...

  • CVE-2026-82956

    🚨 CVE-2026-82956 Improper neutralization of input during web page generation in Apache Wicket...

  • CVE-2026-83539

    🚨 CVE-2026-83539 Improper neutralization of input during web page generation in Apache Wicket...

  • CVE-2026-83559

    🚨 CVE-2026-83559 Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotes()...

Статистика статей

Статьи
53,084
Просмотры
238,885
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху