CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123310

    🚨 CVE-2026-123310 In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in...

  • CVE-2026-123311

    🚨 CVE-2026-123311 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible

  • CVE-2026-123312

    🚨 CVE-2026-123312 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing

  • CVE-2026-123313

    🚨 CVE-2026-123313 In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings

  • CVE-2026-123314

    🚨 CVE-2026-123314 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request

  • CVE-2026-123315

    🚨 CVE-2026-123315 In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option

  • CVE-2026-123316

    🚨 CVE-2026-123316 In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

  • CVE-2026-123317

    🚨 CVE-2026-123317 In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

  • CVE-2026-123318

    🚨 CVE-2026-123318 In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine

  • CVE-2026-123319

    🚨 CVE-2026-123319 In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection

  • CVE-2026-123320

    🚨 CVE-2026-123320 In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server

  • CVE-2026-123321

    🚨 CVE-2026-123321 In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects

  • CVE-2026-123322

    🚨 CVE-2026-123322 In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics...

  • CVE-2026-123323

    🚨 CVE-2026-123323 In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed...

  • CVE-2026-123324

    🚨 CVE-2026-123324 In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible

  • CVE-2026-123325

    🚨 CVE-2026-123325 In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the...

  • CVE-2026-123327

    🚨 CVE-2026-123327 In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

  • CVE-2026-123328

    🚨 CVE-2026-123328 In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху