CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-54378

    🚨 CVE-2026-54378 VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain...

  • CVE-2026-54380

    🚨 CVE-2026-54380 VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attackers to...

  • CVE-2026-54381

    🚨 CVE-2026-54381 VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated...

  • CVE-2026-54382

    🚨 CVE-2026-54382 VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows...

  • CVE-2026-54383

    🚨 CVE-2026-54383 VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated user to...

  • CVE-2026-54384

    🚨 CVE-2026-54384 VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a...

  • CVE-2026-122302

    🚨 CVE-2026-122302 Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond...

  • CVE-2026-122303

    🚨 CVE-2026-122303 Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite...

  • CVE-2026-122304

    🚨 CVE-2026-122304 Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape...

  • CVE-2026-122305

    🚨 CVE-2026-122305 Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to...

  • CVE-2026-122306

    🚨 CVE-2026-122306 Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission...

  • CVE-2026-122307

    🚨 CVE-2026-122307 Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds...

  • CVE-2026-122309

    🚨 CVE-2026-122309 Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and...

  • CVE-2026-122310

    🚨 CVE-2026-122310 Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path...

  • CVE-2026-122311

    🚨 CVE-2026-122311 Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and...

  • CVE-2026-122312

    🚨 CVE-2026-122312 Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go...

  • CVE-2026-122313

    🚨 CVE-2026-122313 Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify...

  • CVE-2026-122314

    🚨 CVE-2026-122314 Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit...

Статистика статей

Статьи
53,087
Просмотры
257,680
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху