CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115937

    🚨 CVE-2026-115937 The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong...

  • CVE-2026-115993

    🚨 CVE-2026-115993 Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to...

  • CVE-2026-115994

    🚨 CVE-2026-115994 BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets...

  • CVE-2026-115998

    🚨 CVE-2026-115998 IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept...

  • CVE-2026-115932

    🚨 CVE-2026-115932 When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not...

  • CVE-2026-114629

    🚨 CVE-2026-114629 Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters...

  • CVE-2026-115557

    🚨 CVE-2026-115557 Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without...

  • CVE-2026-115933

    🚨 CVE-2026-115933 Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is...

  • CVE-2026-115817

    🚨 CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only...

  • CVE-2026-115822

    🚨 CVE-2026-115822 Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request...

  • CVE-2026-112415

    🚨 CVE-2026-112415 An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS...

  • CVE-2026-112533

    🚨 CVE-2026-112533 An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS...

  • CVE-2026-84604

    🚨 CVE-2026-84604 A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS...

  • CVE-2026-117616

    🚨 CVE-2026-117616 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the...

  • CVE-2026-117617

    🚨 CVE-2026-117617 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before...

  • CVE-2026-117618

    🚨 CVE-2026-117618 In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check...

  • CVE-2026-117619

    🚨 CVE-2026-117619 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with...

  • CVE-2026-117620

    🚨 CVE-2026-117620 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the...

Статистика статей

Статьи
53,092
Просмотры
280,491
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху