CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123540

    🚨 CVE-2026-123540 OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter...

  • CVE-2026-123541

    🚨 CVE-2026-123541 OpenAM before 16.1.4 contains an open redirect vulnerability that allows remote attackers to redirect users after SAML 1.x...

  • CVE-2026-123542

    🚨 CVE-2026-123542 OpenAM before 16.1.4 fails to enforce PKCE in the OAuth 2.0 device authorization flow, never validating the code verifier when...

  • CVE-2026-123543

    🚨 CVE-2026-123543 OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server...

  • CVE-2026-123544

    🚨 CVE-2026-123544 OpenAM before 16.1.4 and its client SDK fail to sufficiently validate responses on the internal server-to-server SOAP channel...

  • CVE-2026-123545

    🚨 CVE-2026-123545 OpenAM from 14.5.1 before 16.1.4 contains a cross-site request forgery vulnerability in the OAuth 2.0 device authorization flow...

  • CVE-2026-123546

    🚨 CVE-2026-123546 OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to control...

  • CVE-2026-123547

    🚨 CVE-2026-123547 OpenAM before 16.1.4 contains an open redirect vulnerability that allows attackers to redirect users to external sites because...

  • CVE-2026-123548

    🚨 CVE-2026-123548 OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and...

  • CVE-2026-123549

    🚨 CVE-2026-123549 OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers...

  • CVE-2026-123550

    🚨 CVE-2026-123550 OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned...

  • CVE-2026-123552

    🚨 CVE-2026-123552 OpenAM before 16.1.4 contains a server-side request forgery vulnerability in certificate CRL checking that fetches CRLs from the...

  • CVE-2026-123553

    🚨 CVE-2026-123553 OpenAM before 16.1.4 ships built-in identities in the Top Level Realm (demo, anonymous, wsc, wsp, SecurityTokenService and...

  • CVE-2026-123554

    🚨 CVE-2026-123554 Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because...

  • CVE-2026-123555

    🚨 CVE-2026-123555 Zebra from 2.3.0 before 7.0.0 contains a denial of service vulnerability that allows unauthenticated peers to evade misbehavior...

  • CVE-2026-123556

    🚨 CVE-2026-123556 ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool...

  • CVE-2026-123557

    🚨 CVE-2026-123557 ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote peers...

  • CVE-2026-123558

    🚨 CVE-2026-123558 Zebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху