CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123329

    🚨 CVE-2026-123329 In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects'...

  • CVE-2026-123330

    🚨 CVE-2026-123330 In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility...

  • CVE-2026-123331

    🚨 CVE-2026-123331 In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

  • CVE-2026-123332

    🚨 CVE-2026-123332 In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations

  • CVE-2026-123333

    🚨 CVE-2026-123333 In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints

  • CVE-2026-123334

    🚨 CVE-2026-123334 In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

  • CVE-2026-123335

    🚨 CVE-2026-123335 In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any...

  • CVE-2026-123336

    🚨 CVE-2026-123336 In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion

  • CVE-2026-123337

    🚨 CVE-2026-123337 In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility

  • CVE-2026-66293

    🚨 CVE-2026-66293 XML injection in the encoder of Saxy. Saxy.Encoder does not neutralize the -- sequence in XML comment content: escape_comment/2...

  • CVE-2026-66294

    🚨 CVE-2026-66294 XML injection in the Saxy XML encoder. Saxy.Encoder.cdata/1 serializes a {:cdata, characters} node by wrapping the supplied...

  • CVE-2026-66295

    🚨 CVE-2026-66295 Saxy's XML encoder writes the target and the content of a processing instruction into the output document verbatim, without...

  • CVE-2026-84155

    🚨 CVE-2026-84155 CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one API worker...

  • CVE-2026-84161

    🚨 CVE-2026-84161 When an operator enables store.analysis_statistics_dir, a network client with PRODUCT_STORE permission for a product can call...

  • CVE-2026-84164

    🚨 CVE-2026-84164 The HTML report that plist-to-html, CodeChecker parse --export html and CodeChecker cmd diff --output html generate puts the...

  • CVE-2026-77812

    🚨 CVE-2026-77812 DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption...

  • CVE-2026-118571

    🚨 CVE-2026-118571 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting...

  • CVE-2026-117869

    🚨 CVE-2026-117869 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

Статистика статей

Статьи
53,084
Просмотры
238,885
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху