CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-41786

    🚨 CVE-2024-41786 IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return...

  • CVE-2026-101031

    🚨 CVE-2026-101031 The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's...

  • CVE-2026-107474

    🚨 CVE-2026-107474 The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed...

  • CVE-2026-111395

    🚨 CVE-2026-111395 Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a...

  • CVE-2026-111403

    🚨 CVE-2026-111403 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Inventory WP Inventory...

  • CVE-2026-111421

    🚨 CVE-2026-111421 Apache Airflow's Task Execution API stored XCom values written by a task without the reserved-key check applied elsewhere, so a...

  • CVE-2026-111452

    🚨 CVE-2026-111452 Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored under camelCase keys...

  • CVE-2026-111453

    🚨 CVE-2026-111453 Apache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permission against the `dag_id` query...

  • CVE-2026-111454

    🚨 CVE-2026-111454 Apache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produce, or consume an asset without...

  • CVE-2026-111455

    🚨 CVE-2026-111455 Apache Airflow's asynchronous connection test checked permissions when the test was queued — only create permission when the...

  • CVE-2026-113504

    🚨 CVE-2026-113504 Apache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret registered with the...

  • CVE-2026-113508

    🚨 CVE-2026-113508 Apache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during revocation was...

  • CVE-2026-119483

    🚨 CVE-2026-119483 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web...

  • CVE-2026-119497

    🚨 CVE-2026-119497 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist...

  • CVE-2026-119503

    🚨 CVE-2026-119503 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Welcart Welcart e-Commerce...

  • CVE-2026-119505

    🚨 CVE-2026-119505 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce...

  • CVE-2026-119514

    🚨 CVE-2026-119514 Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege...

  • CVE-2026-121760

    🚨 CVE-2026-121760 Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security...

Статистика статей

Статьи
53,082
Просмотры
213,519
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху