CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-97367

    🚨 CVE-2026-97367 A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner...

  • CVE-2026-97848

    🚨 CVE-2026-97848 A flaw was found in the token sanitization logic of Keycloak, an open source identity and access management solution. The issue...

  • CVE-2026-113431

    🚨 CVE-2026-113431 Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote peer to...

  • CVE-2026-115701

    🚨 CVE-2026-115701 Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker...

  • CVE-2026-116630

    🚨 CVE-2026-116630 undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when an Agent composes the...

  • CVE-2026-123276

    🚨 CVE-2026-123276 In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile

  • CVE-2026-123277

    🚨 CVE-2026-123277 In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment...

  • CVE-2026-123278

    🚨 CVE-2026-123278 In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint

  • CVE-2026-123279

    🚨 CVE-2026-123279 In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators

  • CVE-2026-123280

    🚨 CVE-2026-123280 In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports

  • CVE-2026-123281

    🚨 CVE-2026-123281 In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker

  • CVE-2026-123282

    🚨 CVE-2026-123282 In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session

  • CVE-2026-123284

    🚨 CVE-2026-123284 In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared...

  • CVE-2026-123285

    🚨 CVE-2026-123285 In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection

  • CVE-2026-123286

    🚨 CVE-2026-123286 In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token

  • CVE-2026-123287

    🚨 CVE-2026-123287 In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive...

  • CVE-2026-123288

    🚨 CVE-2026-123288 In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link

  • CVE-2026-123289

    🚨 CVE-2026-123289 In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files

Статистика статей

Статьи
53,084
Просмотры
239,652
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху