CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-82904

    🚨 CVE-2026-82904 Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a...

  • CVE-2026-82907

    🚨 CVE-2026-82907 Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows...

  • CVE-2026-82910

    🚨 CVE-2026-82910 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in MacroScreenRenderer...

  • CVE-2026-82912

    🚨 CVE-2026-82912 Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression Language Injection') in...

  • CVE-2026-82916

    🚨 CVE-2026-82916 Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker...

  • CVE-2026-82960

    🚨 CVE-2026-82960 Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms plugin before 24.09.08 on all...

  • CVE-2026-83538

    🚨 CVE-2026-83538 Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to disclose...

  • CVE-2026-83542

    🚨 CVE-2026-83542 Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-84183

    🚨 CVE-2026-84183 Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layout/LayoutEvents.xml in Apache...

  • CVE-2026-84728

    🚨 CVE-2026-84728 Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms, when documented multitenancy is enabled, allows...

  • CVE-2026-85627

    🚨 CVE-2026-85627 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache OFBiz 24.09...

  • CVE-2026-92887

    🚨 CVE-2026-92887 Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFBiz through 24.09.07...

  • CVE-2026-97355

    🚨 CVE-2026-97355 Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platforms allows an...

  • CVE-2026-97356

    🚨 CVE-2026-97356 External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz 24.09.07 on all...

  • CVE-2024-7383

    🚨 CVE-2024-7383 A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to...

  • CVE-2024-7409

    🚨 CVE-2024-7409 A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization...

  • CVE-2024-7006

    🚨 CVE-2024-7006 A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory...

  • CVE-2024-8235

    🚨 CVE-2024-8235 A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on...

Статистика статей

Статьи
53,087
Просмотры
258,367
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху