CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-83782

    🚨 CVE-2026-83782 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

  • CVE-2026-83783

    🚨 CVE-2026-83783 Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

  • CVE-2026-101410

    🚨 CVE-2026-101410 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported...

  • CVE-2026-101435

    🚨 CVE-2026-101435 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions...

  • CVE-2026-77156

    🚨 CVE-2026-77156 Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when installing...

  • CVE-2026-77157

    🚨 CVE-2026-77157 ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as...

  • CVE-2026-93336

    🚨 CVE-2026-93336 Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated...

  • CVE-2026-114647

    🚨 CVE-2026-114647 The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in...

  • CVE-2026-114648

    🚨 CVE-2026-114648 The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter identifiers...

  • CVE-2026-114649

    🚨 CVE-2026-114649 The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can...

  • CVE-2026-114650

    🚨 CVE-2026-114650 A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side field-level...

  • CVE-2026-115517

    🚨 CVE-2026-115517 Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated...

  • CVE-2026-115519

    🚨 CVE-2026-115519 Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote...

  • CVE-2026-79853

    🚨 CVE-2026-79853 Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote...

  • CVE-2026-79869

    🚨 CVE-2026-79869 Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to...

  • CVE-2026-79870

    🚨 CVE-2026-79870 An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to...

  • CVE-2026-79871

    🚨 CVE-2026-79871 A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote...

  • CVE-2026-114583

    🚨 CVE-2026-114583 tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to...

Статистика статей

Статьи
53,092
Просмотры
282,592
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху