CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105330

    🚨 CVE-2026-105330 Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms allows an...

  • CVE-2026-105461

    🚨 CVE-2026-105461 Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders. Affected...

  • CVE-2026-107912

    🚨 CVE-2026-107912 A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The...

  • CVE-2026-109129

    🚨 CVE-2026-109129 Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on all platforms allows...

  • CVE-2026-109837

    🚨 CVE-2026-109837 Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all platforms allows...

  • CVE-2026-109856

    🚨 CVE-2026-109856 Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows...

  • CVE-2026-109928

    🚨 CVE-2026-109928 Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz 24.09 before...

  • CVE-2026-114229

    🚨 CVE-2026-114229 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in Apache OFBiz...

  • CVE-2026-114233

    🚨 CVE-2026-114233 Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an...

  • CVE-2026-114235

    🚨 CVE-2026-114235 Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an...

  • CVE-2026-114271

    🚨 CVE-2026-114271 Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on all...

  • CVE-2026-114272

    🚨 CVE-2026-114272 Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08 on all...

  • CVE-2026-114277

    🚨 CVE-2026-114277 Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage Social...

  • CVE-2026-117691

    🚨 CVE-2026-117691 A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes...

  • CVE-2026-123022

    🚨 CVE-2026-123022 A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of...

  • CVE-2026-123023

    🚨 CVE-2026-123023 A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file...

  • CVE-2026-123024

    🚨 CVE-2026-123024 A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the...

  • CVE-2026-123059

    🚨 CVE-2026-123059 In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled store...

Статистика статей

Статьи
53,087
Просмотры
258,367
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху