CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-2002

    🚨 CVE-2024-2002 A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an...

  • CVE-2024-1023

    🚨 CVE-2024-1023 A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures...

  • CVE-2024-1300

    🚨 CVE-2024-1300 A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When...

  • CVE-2024-2700

    🚨 CVE-2024-2700 A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namespace...

  • CVE-2024-1481

    🚨 CVE-2024-1481 A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be...

  • CVE-2023-5675

    🚨 CVE-2023-5675 A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract...

  • CVE-2023-6717

    🚨 CVE-2023-6717 A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript...

  • CVE-2024-2467

    🚨 CVE-2024-2467 A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext...

  • CVE-2024-2199

    🚨 CVE-2024-2199 A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a...

  • CVE-2023-6841

    🚨 CVE-2023-6841 A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by...

  • CVE-2024-10033

    🚨 CVE-2024-10033 A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw...

  • CVE-2024-10041

    🚨 CVE-2024-10041 A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program...

  • CVE-2024-10573

    🚨 CVE-2024-10573 An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past...

  • CVE-2024-11079

    🚨 CVE-2024-11079 A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars...

  • CVE-2024-12397

    🚨 CVE-2024-12397 A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests...

  • CVE-2024-12086

    🚨 CVE-2024-12086 A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This...

  • CVE-2024-12088

    🚨 CVE-2024-12088 A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link...

  • CVE-2024-11029

    🚨 CVE-2024-11029 A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during...

Статистика статей

Статьи
53,087
Просмотры
258,922
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху