CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111452

    🚨 CVE-2026-111452 Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored under camelCase keys...

  • CVE-2026-111454

    🚨 CVE-2026-111454 Apache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produce, or consume an asset without...

  • CVE-2026-113504

    🚨 CVE-2026-113504 Apache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret registered with the...

  • CVE-2026-50204

    🚨 CVE-2026-50204 Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the...

  • CVE-2026-68982

    🚨 CVE-2026-68982 Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating...

  • CVE-2026-86468

    🚨 CVE-2026-86468 Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command...

  • CVE-2026-110468

    🚨 CVE-2026-110468 WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a...

  • CVE-2026-110468

    🚨 CVE-2026-110469 WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission...

  • CVE-2026-112168

    🚨 CVE-2026-112168 The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and...

  • CVE-2026-112169

    🚨 CVE-2026-112169 Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a...

  • CVE-2026-112171

    🚨 CVE-2026-112171 An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of...

  • CVE-2026-110468

    🚨 CVE-2026-112204 WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened...

  • CVE-2026-110468

    🚨 CVE-2026-112205 WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed...

  • CVE-2026-118790

    🚨 CVE-2026-118790 Multiple hardcoded credentials are embedded within product components and administrative functionalities. These credentials may...

  • CVE-2026-118791

    🚨 CVE-2026-118791 The application implements software update functionality without adequate authenticity and integrity validation, allowing update...

  • CVE-2026-118792

    🚨 CVE-2026-118792 Default credentials permit access through AcuXDBC.

  • CVE-2026-118795

    🚨 CVE-2026-118795 Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for...

  • CVE-2026-118798

    🚨 CVE-2026-118798 Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication...

Статистика статей

Статьи
53,082
Просмотры
209,808
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху