CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111594

    🚨 CVE-2026-111594 InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data...

  • CVE-2026-92450

    🚨 CVE-2026-92450 The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256...

  • CVE-2026-19677

    🚨 CVE-2026-19677 An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated...

  • CVE-2026-19678

    🚨 CVE-2026-19678 A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows...

  • CVE-2026-107858

    🚨 CVE-2026-107858 Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the...

  • CVE-2026-89312

    🚨 CVE-2026-89312 `AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length. The Go standard...

  • CVE-2026-89314

    🚨 CVE-2026-89314 `jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validation cost grow with...

  • CVE-2026-89315

    🚨 CVE-2026-89315 `JwtClaims.MarshalJSON` built a Go struct at runtime with `reflect.StructOf`, synthesising a field named `"A" + claimName` for...

  • CVE-2026-86925

    🚨 CVE-2026-86925 An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS...

  • CVE-2026-64618

    🚨 CVE-2026-64618 Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract...

  • CVE-2026-65874

    🚨 CVE-2026-65874 This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) and the...

  • CVE-2024-12141

    🚨 CVE-2024-12141 The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when processed...

  • CVE-2026-111560

    🚨 CVE-2026-111560 Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products...

  • CVE-2026-116606

    🚨 CVE-2026-116606 An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote...

  • CVE-2026-91903

    🚨 CVE-2026-91903 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory...

  • CVE-2026-91904

    🚨 CVE-2026-91904 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource...

  • CVE-2026-91905

    🚨 CVE-2026-91905 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability...

  • CVE-2026-91906

    🚨 CVE-2026-91906 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource...

Статистика статей

Статьи
53,092
Просмотры
282,592
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху