CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-97350

    🚨 CVE-2026-97350 Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings...

  • CVE-2026-103916

    🚨 CVE-2026-103916 Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace...

  • CVE-2026-114185

    🚨 CVE-2026-114185 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere Elementor...

  • CVE-2026-115289

    🚨 CVE-2026-115289 Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a specially...

  • CVE-2026-115290

    🚨 CVE-2026-115290 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads...

  • CVE-2026-115292

    🚨 CVE-2026-115292 Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure via...

  • CVE-2026-115293

    🚨 CVE-2026-115293 Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of the...

  • CVE-2026-115294

    🚨 CVE-2026-115294 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to unauthorized...

  • CVE-2026-115295

    🚨 CVE-2026-115295 Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing...

  • CVE-2026-115297

    🚨 CVE-2026-115297 NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted...

  • CVE-2026-115298

    🚨 CVE-2026-115298 Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not Properly...

  • CVE-2026-115710

    🚨 CVE-2026-115710 Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and incorrect search...

  • CVE-2026-115714

    🚨 CVE-2026-115714 Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM Server...

  • CVE-2026-115716

    🚨 CVE-2026-115716 Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized...

  • CVE-2026-119487

    🚨 CVE-2026-119487 Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-119495

    🚨 CVE-2026-119495 Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured Access...

  • CVE-2026-119672

    🚨 CVE-2026-119672 MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when --local is...

  • CVE-2026-119673

    🚨 CVE-2026-119673 MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for...

Статистика статей

Статьи
53,092
Просмотры
269,249
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху