CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113372

    🚨 CVE-2026-113372 Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the...

  • CVE-2026-113373

    🚨 CVE-2026-113373 Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or...

  • CVE-2026-113374

    🚨 CVE-2026-113374 Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user...

  • CVE-2026-115474

    🚨 CVE-2026-115474 Zulip is an open-source team collaboration tool. From 8.0 until 12.2, in organizations where the Who can view all other users in...

  • CVE-2026-115574

    🚨 CVE-2026-115574 Zulip is an open-source team collaboration tool. From 11.0 until 12.2, organizations with web-public channels enabled exposed...

  • CVE-2026-121933

    🚨 CVE-2026-121933 A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi of the...

  • CVE-2026-122192

    🚨 CVE-2026-122192 Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root...

  • CVE-2026-122220

    🚨 CVE-2026-122220 WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability...

  • CVE-2026-76806

    🚨 CVE-2026-76806 Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-controlled project...

  • CVE-2026-97705

    🚨 CVE-2026-97705 Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser._write in...

  • CVE-2026-116239

    🚨 CVE-2026-116239 In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal...

  • CVE-2026-116240

    🚨 CVE-2026-116240 In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the...

  • CVE-2023-4853

    🚨 CVE-2023-4853 A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when...

  • CVE-2023-5557

    🚨 CVE-2023-5557 A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code...

  • CVE-2023-5633

    🚨 CVE-2023-5633 The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way...

  • CVE-2023-5367

    🚨 CVE-2023-5367 A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset...

  • CVE-2023-5574

    🚨 CVE-2023-5574 A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration...

  • CVE-2023-5824

    🚨 CVE-2023-5824 A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху