CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123521

    🚨 CVE-2026-123521 Vikunja before 2.7.1 contains an improper restriction of excessive authentication attempts vulnerability that allows session...

  • CVE-2026-123522

    🚨 CVE-2026-123522 Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by...

  • CVE-2026-123523

    🚨 CVE-2026-123523 Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust...

  • CVE-2026-123524

    🚨 CVE-2026-123524 Vikunja from 0.23.0 before 2.7.1 contains an information disclosure vulnerability that allows project collaborators with write...

  • CVE-2026-123525

    🚨 CVE-2026-123525 Vikunja before 2.7.1 allocates memory without limits in its Trello, Todoist and Microsoft To Do migration importers, which...

  • CVE-2026-123526

    🚨 CVE-2026-123526 Vikunja before 2.7.1 contains a mass assignment vulnerability that allows any authenticated user to set the read-only...

  • CVE-2026-123527

    🚨 CVE-2026-123527 Vikunja from 2.4.0 before 2.7.1 contains an authorization bypass vulnerability that allows token holders to perform unintended...

  • CVE-2026-123528

    🚨 CVE-2026-123528 Vikunja before 2.7.1 contains an insufficient session expiration vulnerability that allows holders of revoked access tokens to...

  • CVE-2026-123529

    🚨 CVE-2026-123529 Vikunja before 2.7.1 contains a stored CSS injection vulnerability that allows authenticated users with project write access to...

  • CVE-2026-123531

    🚨 CVE-2026-123531 Vikunja from 1.0.0 before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated users to...

  • CVE-2026-123532

    🚨 CVE-2026-123532 gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM...

  • CVE-2026-123533

    🚨 CVE-2026-123533 gix-commitgraph before 0.42.0, as used in gitoxide before 0.61.0, contains a denial of service vulnerability because its...

  • CVE-2026-123534

    🚨 CVE-2026-123534 Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.static_url() and get_version() that allows...

  • CVE-2026-123535

    🚨 CVE-2026-123535 Tornado before 6.6 does not validate the max_age argument of RequestHandler.set_cookie (also called by set_signed_cookie...

  • CVE-2026-123536

    🚨 CVE-2026-123536 OpenAM before 16.1.4 contains a server-side request forgery vulnerability that allows administrators, including delegated realm...

  • CVE-2026-123537

    🚨 CVE-2026-123537 OpenAM before 16.1.4 contains a server-side request forgery vulnerability that allows parties registering UMA resource sets to...

  • CVE-2026-123538

    🚨 CVE-2026-123538 OpenAM before 16.1.4 does not verify that a signed SAML 1.x assertion or response was signed by the partner named as its issuer...

  • CVE-2026-123539

    🚨 CVE-2026-123539 OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху