CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-117621

    🚨 CVE-2026-117621 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for...

  • CVE-2026-117622

    🚨 CVE-2026-117622 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse...

  • CVE-2026-117623

    🚨 CVE-2026-117623 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow...

  • CVE-2026-117624

    🚨 CVE-2026-117624 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of...

  • CVE-2026-117625

    🚨 CVE-2026-117625 A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission...

  • CVE-2026-117626

    🚨 CVE-2026-117626 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file...

  • CVE-2026-116131

    🚨 CVE-2026-116131 HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields...

  • CVE-2026-116132

    🚨 CVE-2026-116132 HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart...

  • CVE-2026-116133

    🚨 CVE-2026-116133 HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or...

  • CVE-2026-58868

    🚨 CVE-2026-58868 In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead...

  • CVE-2026-63183

    🚨 CVE-2026-63183 OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth derives provider callback URLs...

  • CVE-2026-115474

    🚨 CVE-2026-115474 Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other users in...

  • CVE-2026-115574

    🚨 CVE-2026-115574 Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled exposed...

  • CVE-2026-122220

    🚨 CVE-2026-122220 WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability...

  • CVE-2026-97705

    🚨 CVE-2026-97705 Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in...

  • CVE-2025-71453

    🚨 CVE-2025-71453 vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that...

  • CVE-2025-71455

    🚨 CVE-2025-71455 vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value...

  • CVE-2025-71456

    🚨 CVE-2025-71456 vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by...

Статистика статей

Статьи
53,084
Просмотры
249,703
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху