CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-76152

    🚨 CVE-2026-76152 Path traversal and missing authorization check in the imageCrop and imageRotate services in Apache OFBiz through 24.09.07 on all...

  • CVE-2026-81734

    🚨 CVE-2026-81734 Missing Authorization in ProductEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated...

  • CVE-2026-81744

    🚨 CVE-2026-81744 Incorrect Authorization in ContentPermissionServices in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-81808

    🚨 CVE-2026-81808 Missing Authorization in ProductSearchEvents in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated...

  • CVE-2026-81815

    🚨 CVE-2026-81815 SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed...

  • CVE-2026-81816

    🚨 CVE-2026-81816 XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-81828

    🚨 CVE-2026-81828 Server-Side Request Forgery in SurveyWrapper in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated...

  • CVE-2026-82894

    🚨 CVE-2026-82894 Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated...

  • CVE-2026-112512

    🚨 CVE-2026-112512 A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia...

  • CVE-2026-112513

    🚨 CVE-2026-112513 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able...

  • CVE-2026-112514

    🚨 CVE-2026-112514 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS...

  • CVE-2026-112515

    🚨 CVE-2026-112515 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2...

  • CVE-2026-112516

    🚨 CVE-2026-112516 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS...

  • CVE-2026-112576

    🚨 CVE-2026-112576 A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and...

  • CVE-2026-73578

    🚨 CVE-2026-73578 Missing authorization enforcement in RequestHandler.renderView in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a...

  • CVE-2026-73580

    🚨 CVE-2026-73580 Missing authorization check in the getHRChild service in Apache OFBiz through 24.09.07 on all platforms allows a remote...

  • CVE-2026-74841

    🚨 CVE-2026-74841 In multitenant deployments, ContextFilter and LoginWorker built a per-tenant delegator name from a request-supplied userTenantId...

  • CVE-2026-76150

    🚨 CVE-2026-76150 Path traversal and missing authorization check in the replaceImageToExistImage service in Apache OFBiz through 24.09.07 on all...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху