CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91276

    🚨 CVE-2026-91276 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator...

  • CVE-2026-91277

    🚨 CVE-2026-91277 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator...

  • CVE-2026-91285

    🚨 CVE-2026-91285 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator...

  • CVE-2026-114406

    🚨 CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple...

  • CVE-2026-115693

    🚨 CVE-2026-115693 Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonate a...

  • CVE-2026-115930

    🚨 CVE-2026-115930 The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This...

  • CVE-2026-77055

    🚨 CVE-2026-77055 boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo access and...

  • CVE-2026-77052

    🚨 CVE-2026-77052 boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED...

  • CVE-2026-77057

    🚨 CVE-2026-77057 boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not enforce...

  • CVE-2026-93847

    🚨 CVE-2026-93847 Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication...

  • CVE-2026-93846

    🚨 CVE-2026-93846 Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the API, which...

  • CVE-2026-71455

    🚨 CVE-2026-71455 Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded...

  • CVE-2026-71456

    🚨 CVE-2026-71456 Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack...

  • CVE-2026-77053

    🚨 CVE-2026-77053 boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network interfaces and...

  • CVE-2026-70379

    🚨 CVE-2026-70379 When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an...

  • CVE-2026-65625

    🚨 CVE-2026-65625 The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the...

  • CVE-2026-65626

    🚨 CVE-2026-65626 The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_decode/2...

  • CVE-2026-70380

    🚨 CVE-2026-70380 A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE)...

Статистика статей

Статьи
53,092
Просмотры
275,465
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху