CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-101407

    🚨 CVE-2026-101407 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant)...

  • CVE-2026-118871

    🚨 CVE-2026-118871 SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection...

  • CVE-2026-18800

    🚨 CVE-2026-18800 When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products...

  • CVE-2026-115683

    🚨 CVE-2026-115683 A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registers the...

  • CVE-2026-72693

    🚨 CVE-2026-72693 `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context...

  • CVE-2024-2372

    🚨 CVE-2024-2372 The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation...

  • CVE-2025-12544

    🚨 CVE-2025-12544 The Publisher portal fails to enforce proper validation on uploaded SVG files, allowing users with the Publisher role to inject...

  • CVE-2026-117518

    🚨 CVE-2026-117518 @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including...

  • CVE-2026-117531

    🚨 CVE-2026-117531 @fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 through...

  • CVE-2026-117549

    🚨 CVE-2026-117549 @fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through...

  • CVE-2026-120213

    🚨 CVE-2026-120213 @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions...

  • CVE-2026-120214

    🚨 CVE-2026-120214 @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions...

  • CVE-2026-120215

    🚨 CVE-2026-120215 @fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers...

  • CVE-2026-120216

    🚨 CVE-2026-120216 fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero...

  • CVE-2026-2613

    🚨 CVE-2026-2613 The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of...

  • CVE-2026-8923

    🚨 CVE-2026-8923 Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code...

  • CVE-2024-9517

    🚨 CVE-2024-9517 The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. This weakness...

  • CVE-2026-100140

    🚨 CVE-2026-100140 An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / QXmlSimpleReader) functionality of Qt.

Статистика статей

Статьи
53,092
Просмотры
282,592
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху