CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-76563

    🚨 CVE-2026-76563 Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services...

  • CVE-2026-82902

    🚨 CVE-2026-82902 Server-Side Request Forgery in ViewDataFile in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated...

  • CVE-2026-82904

    🚨 CVE-2026-82904 Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a...

  • CVE-2026-82907

    🚨 CVE-2026-82907 Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows...

  • CVE-2026-82910

    🚨 CVE-2026-82910 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in MacroScreenRenderer...

  • CVE-2026-82912

    🚨 CVE-2026-82912 Improper Neutralization of Special Elements Used in an Expression Language Statement ('Expression Language Injection') in...

  • CVE-2026-82916

    🚨 CVE-2026-82916 Missing Authorization in XmlDsDump in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker...

  • CVE-2026-82960

    🚨 CVE-2026-82960 Improper Control of Generation of Code ('Code Injection') in ModelFormField in the Apache OFBiz cms plugin before 24.09.08 on all...

  • CVE-2026-83538

    🚨 CVE-2026-83538 Missing Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to disclose...

  • CVE-2026-83542

    🚨 CVE-2026-83542 Improper Control of Generation of Code ('Code Injection') in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-84183

    🚨 CVE-2026-84183 Incorrect Authorization in the updateLayout simple-method in applications/content/minilang/layout/LayoutEvents.xml in Apache...

  • CVE-2026-84728

    🚨 CVE-2026-84728 Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms, when documented multitenancy is enabled, allows...

  • CVE-2026-85627

    🚨 CVE-2026-85627 Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache OFBiz 24.09...

  • CVE-2026-92887

    🚨 CVE-2026-92887 Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFBiz through 24.09.07...

  • CVE-2026-97355

    🚨 CVE-2026-97355 Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platforms allows an...

  • CVE-2026-97356

    🚨 CVE-2026-97356 External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz 24.09.07 on all...

  • CVE-2026-112565

    🚨 CVE-2026-112565 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and...

  • CVE-2026-112566

    🚨 CVE-2026-112566 A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2...

Статистика статей

Статьи
53,087
Просмотры
258,367
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху