CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114421

    🚨 CVE-2026-114421 SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial...

  • CVE-2026-114424

    🚨 CVE-2026-114424 SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or...

  • CVE-2026-114425

    🚨 CVE-2026-114425 SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment...

  • CVE-2026-114426

    🚨 CVE-2026-114426 SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller...

  • CVE-2026-19721

    🚨 CVE-2026-19721 Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute...

  • CVE-2026-19731

    🚨 CVE-2026-19731 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software...

  • CVE-2026-108949

    🚨 CVE-2026-108949 Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker. An authenticated OpenWire client that sends a...

  • CVE-2026-111036

    🚨 CVE-2026-111036 Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document...

  • CVE-2026-111037

    🚨 CVE-2026-111037 A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The...

  • CVE-2026-111038

    🚨 CVE-2026-111038 CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability...

  • CVE-2026-111040

    🚨 CVE-2026-111040 The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with low...

  • CVE-2026-111821

    🚨 CVE-2026-111821 Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription...

  • CVE-2026-111822

    🚨 CVE-2026-111822 Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the...

  • CVE-2026-100235

    🚨 CVE-2026-100235 Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) race condition in the setACL request handling of Apache...

  • CVE-2026-100252

    🚨 CVE-2026-100252 Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the server's...

  • CVE-2026-100300

    🚨 CVE-2026-100300 Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under...

  • CVE-2026-103582

    🚨 CVE-2026-103582 Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package...

  • CVE-2026-108500

    🚨 CVE-2026-108500 Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an authenticated...

Статистика статей

Статьи
53,088
Просмотры
262,891
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху