CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118259

    🚨 CVE-2026-118259 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry...

  • CVE-2026-118263

    🚨 CVE-2026-118263 Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a BodyLimit overflow error for an...

  • CVE-2026-118643

    🚨 CVE-2026-118643 n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when...

  • CVE-2026-118647

    🚨 CVE-2026-118647 n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution...

  • CVE-2026-118676

    🚨 CVE-2026-118676 n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use...

  • CVE-2026-118680

    🚨 CVE-2026-118680 SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing the IsSensitivePath...

  • CVE-2026-118685

    🚨 CVE-2026-118685 ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, which treats the string...

  • CVE-2026-118650

    🚨 CVE-2026-118650 Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an encoded...

  • CVE-2026-118653

    🚨 CVE-2026-118653 Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP...

  • CVE-2026-118654

    🚨 CVE-2026-118654 Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route...

  • CVE-2026-13451

    🚨 CVE-2026-13451 A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can...

  • CVE-2026-118658

    🚨 CVE-2026-118658 Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto...

  • CVE-2026-118752

    🚨 CVE-2026-118752 FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in the PBM...

  • CVE-2026-118753

    🚨 CVE-2026-118753 FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in...

  • CVE-2026-114488

    🚨 CVE-2026-114488 A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security...

  • CVE-2026-117688

    🚨 CVE-2026-117688 A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When...

  • CVE-2026-93006

    🚨 CVE-2026-93006 A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not...

  • CVE-2026-118425

    🚨 CVE-2026-118425 A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solution. The...

Статистика статей

Статьи
53,092
Просмотры
274,580
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху