CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-7203

    🚨 CVE-2025-7203 The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and...

  • CVE-2026-115513

    🚨 CVE-2026-115513 OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to...

  • CVE-2026-115357

    🚨 CVE-2026-115357 OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root...

  • CVE-2026-115361

    🚨 CVE-2026-115361 OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden identity...

  • CVE-2026-115365

    🚨 CVE-2026-115365 OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows tokens to...

  • CVE-2025-30043

    🚨 CVE-2025-30053 The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The...

  • CVE-2026-116069

    🚨 CVE-2026-116069 NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make...

  • CVE-2026-116487

    🚨 CVE-2026-116487 NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in...

  • CVE-2026-112346

    🚨 CVE-2026-112346 OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the...

  • CVE-2026-116806

    🚨 CVE-2026-116806 OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows...

  • CVE-2026-117880

    🚨 CVE-2026-117880 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6...

  • CVE-2026-117881

    🚨 CVE-2026-117881 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

  • CVE-2026-117882

    🚨 CVE-2026-117882 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6...

  • CVE-2026-117883

    🚨 CVE-2026-117883 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

  • CVE-2026-117884

    🚨 CVE-2026-117884 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6...

  • CVE-2025-13173

    🚨 CVE-2025-13173 Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO...

  • CVE-2025-13591

    🚨 CVE-2025-13591 The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist...

  • CVE-2025-6623

    🚨 CVE-2025-6623 The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the...

Статистика статей

Статьи
53,087
Просмотры
259,927
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху