CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-73095

    🚨 CVE-2026-73095 Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST...

  • CVE-2026-73098

    🚨 CVE-2026-73098 Improper control of dynamically-loaded code vulnerability in Apache Juneau. When Apache Juneau parses a value into a property of...

  • CVE-2026-73099

    🚨 CVE-2026-73099 Cross-Site Request Forgery (CSRF) vulnerability in Apache Juneau. The REST server accepts a "content" query parameter that...

  • CVE-2026-73100

    🚨 CVE-2026-73100 Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records...

  • CVE-2026-73101

    🚨 CVE-2026-73101 Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST server sends the internal...

  • CVE-2026-73116

    🚨 CVE-2026-73116 Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClient followed HTTP redirects while...

  • CVE-2026-73117

    🚨 CVE-2026-73117 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau. The Apache...

  • CVE-2026-96677

    🚨 CVE-2026-96677 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau. HTML...

  • CVE-2026-106713

    🚨 CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the...

  • CVE-2026-106714

    🚨 CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a...

  • CVE-2026-106715

    🚨 CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An...

  • CVE-2026-106716

    🚨 CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in...

  • CVE-2026-115738

    🚨 CVE-2026-115738 SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to...

  • CVE-2026-119744

    🚨 CVE-2026-119744 Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that allows an...

  • CVE-2026-123032

    🚨 CVE-2026-123032 A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects...

  • CVE-2026-66903

    🚨 CVE-2026-66903 Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache...

  • CVE-2026-68524

    🚨 CVE-2026-68524 An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a "file:" URI to...

  • CVE-2026-71901

    🚨 CVE-2026-71901 Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz. An authenticate user with...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху