CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-82115

    🚨 CVE-2026-82115 Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, the request handler...

  • CVE-2026-82557

    🚨 CVE-2026-82557 Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a form...

  • CVE-2026-82558

    🚨 CVE-2026-82558 Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wicket's native...

  • CVE-2026-82559

    🚨 CVE-2026-82559 Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocketRequest() wraps...

  • CVE-2026-82704

    🚨 CVE-2026-82704 Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.ListenerRequestHandler invokes an...

  • CVE-2026-82705

    🚨 CVE-2026-82705 Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthorizationStrategy declares isResourceAuthorized()...

  • CVE-2026-82840

    🚨 CVE-2026-82840 Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authentication base...

  • CVE-2026-82898

    🚨 CVE-2026-82898 Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener...

  • CVE-2026-111089

    🚨 CVE-2026-111089 Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes some of...

  • CVE-2026-120275

    🚨 CVE-2026-120275 A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the...

  • CVE-2026-82956

    🚨 CVE-2026-82956 Improper neutralization of input during web page generation in Apache Wicket...

  • CVE-2026-83539

    🚨 CVE-2026-83539 Improper neutralization of input during web page generation in Apache Wicket...

  • CVE-2026-83559

    🚨 CVE-2026-83559 Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotes()...

  • CVE-2026-83594

    🚨 CVE-2026-83594 Memory allocation with an excessive size value in Apache Wicket...

  • CVE-2026-84170

    🚨 CVE-2026-84170 Allocation of resources without limits or throttling in Apache Wicket...

  • CVE-2026-84172

    🚨 CVE-2026-84172 Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html.PackageResourceGuard decides whether a file...

  • CVE-2026-84177

    🚨 CVE-2026-84177 Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attributes that complete it...

  • CVE-2026-84231

    🚨 CVE-2026-84231 Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.link.ExternalLink...

Статистика статей

Статьи
53,093
Просмотры
284,159
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху