CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121257

    🚨 CVE-2026-121257 Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary...

  • CVE-2026-121621

    🚨 CVE-2026-121621 A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL configured on an SSH Git repository is...

  • CVE-2026-77690

    🚨 CVE-2026-77690 ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed...

  • CVE-2026-121816

    🚨 CVE-2026-121816 Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote attackers...

  • CVE-2026-121817

    🚨 CVE-2026-121817 Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated...

  • CVE-2026-121818

    🚨 CVE-2026-121818 Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can...

  • CVE-2026-119366

    🚨 CVE-2026-119366 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AdvancedCoding wpDiscuz...

  • CVE-2026-110021

    🚨 CVE-2026-110021 PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over...

  • CVE-2026-110022

    🚨 CVE-2026-110022 The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plugin repository and...

  • CVE-2026-110935

    🚨 CVE-2026-110935 The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local...

  • CVE-2026-114456

    🚨 CVE-2026-114456 Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-on flow could have allowed an...

  • CVE-2026-120421

    🚨 CVE-2026-120421 In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window...

  • CVE-2026-122116

    🚨 CVE-2026-122116 Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP...

  • CVE-2026-122118

    🚨 CVE-2026-122118 In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with...

  • CVE-2026-113368

    🚨 CVE-2026-113368 Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is...

  • CVE-2026-113369

    🚨 CVE-2026-113369 Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds...

  • CVE-2026-113370

    🚨 CVE-2026-113370 Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task. A...

  • CVE-2026-113371

    🚨 CVE-2026-113371 Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a...

Статистика статей

Статьи
53,087
Просмотры
259,927
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху