CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123502

    🚨 CVE-2026-123502 Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because...

  • CVE-2026-123503

    🚨 CVE-2026-123503 Vikunja before 2.7.1 contains an improper authorization vulnerability in canDoBucket that allows users with project write access...

  • CVE-2026-123504

    🚨 CVE-2026-123504 Vikunja from 0.22.0 before 2.7.1 contains an information disclosure vulnerability that allows read-only project members to view...

  • CVE-2026-123505

    🚨 CVE-2026-123505 Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read stored data because...

  • CVE-2026-123506

    🚨 CVE-2026-123506 Vikunja from 2.2.0 before 2.7.1 contains an authorization bypass vulnerability that allows holders of tokens scoped only to...

  • CVE-2026-123507

    🚨 CVE-2026-123507 Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins to break project...

  • CVE-2026-123508

    🚨 CVE-2026-123508 Vikunja before 2.7.1 contains a supply chain vulnerability in its mage release targets that fetch the xgo module and Docker...

  • CVE-2026-123510

    🚨 CVE-2026-123510 Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load from and logs to be...

  • CVE-2026-123511

    🚨 CVE-2026-123511 Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated CalDAV clients to...

  • CVE-2026-123512

    🚨 CVE-2026-123512 Vikunja before 2.7.1 embeds live password-reset, email-confirmation and account-deletion tokens in the URL query string of...

  • CVE-2026-123513

    🚨 CVE-2026-123513 Vikunja before 2.7.1 contains a credential exposure vulnerability that allows attackers to steal stored auth tokens by inducing...

  • CVE-2026-123514

    🚨 CVE-2026-123514 Vikunja before 2.7.1 contains an improper resource cleanup vulnerability that leaves full-data export archives orphaned on disk...

  • CVE-2026-123515

    🚨 CVE-2026-123515 Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make viewers'...

  • CVE-2026-123516

    🚨 CVE-2026-123516 Vikunja before 2.7.1 contains a resource exhaustion vulnerability in the vikunja-file ZIP importer that allows authenticated...

  • CVE-2026-123517

    🚨 CVE-2026-123517 Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to determine whether...

  • CVE-2026-123518

    🚨 CVE-2026-123518 Vikunja before 2.7.1 contains an incorrect authorization vulnerability in TaskBucket.CanUpdate, which checks write access to the...

  • CVE-2026-123519

    🚨 CVE-2026-123519 Vikunja before 2.7.1 contains a denial of service vulnerability that allows authenticated users to exhaust API process memory by...

  • CVE-2026-123520

    🚨 CVE-2026-123520 Vikunja from 0.18.0 before 2.7.1 contains a privilege escalation vulnerability that allows team owners to gain admin or...

Статистика статей

Статьи
53,082
Просмотры
218,839
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху