CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2023-5685

    🚨 CVE-2023-5685 A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states...

  • CVE-2024-3019

    🚨 CVE-2024-3019 A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote...

  • CVE-2024-1132

    🚨 CVE-2024-1132 A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker...

  • CVE-2024-1249

    🚨 CVE-2024-1249 A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw...

  • CVE-2024-27834

    🚨 CVE-2024-27834 The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and...

  • CVE-2024-3657

    🚨 CVE-2024-3657 A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading...

  • CVE-2024-7358

    🚨 CVE-2024-7358 A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the...

  • CVE-2024-7885

    🚨 CVE-2024-7885 A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple...

  • CVE-2024-10295

    🚨 CVE-2024-10295 A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly...

  • CVE-2024-10963

    🚨 CVE-2024-10963 A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This...

  • CVE-2024-12084

    🚨 CVE-2024-12084 A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled...

  • CVE-2024-11218

    🚨 CVE-2024-11218 A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race...

  • CVE-2024-12125

    🚨 CVE-2024-12125 A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible...

  • CVE-2026-91532

    🚨 CVE-2026-91532 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported...

  • CVE-2026-91537

    🚨 CVE-2026-91537 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is...

  • CVE-2026-91542

    🚨 CVE-2026-91542 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions...

  • CVE-2026-115330

    🚨 CVE-2026-115330 Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arbitrary...

  • CVE-2026-115334

    🚨 CVE-2026-115334 Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated...

Статистика статей

Статьи
53,087
Просмотры
259,927
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху