CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-17393

    🚨 CVE-2026-17393 IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a local attacker to obtain sensitive information due to the use of a...

  • CVE-2026-17400

    🚨 CVE-2026-17400 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain...

  • CVE-2026-17409

    🚨 CVE-2026-17409 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...

  • CVE-2026-17428

    🚨 CVE-2026-17428 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain...

  • CVE-2026-18535

    🚨 CVE-2026-18535 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service...

  • CVE-2026-19124

    🚨 CVE-2026-19124 IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials...

  • CVE-2026-19126

    🚨 CVE-2026-19126 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptographic algorithms that...

  • CVE-2026-19128

    🚨 CVE-2026-19128 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due...

  • CVE-2026-19131

    🚨 CVE-2026-19131 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read sensitive data due...

  • CVE-2026-123493

    🚨 CVE-2026-123493 Vikunja from 2.4.0 before 2.7.1 contains an authentication bypass vulnerability that allows disabled or locked users to retain...

  • CVE-2026-123494

    🚨 CVE-2026-123494 Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows attackers to import their data into a...

  • CVE-2026-123495

    🚨 CVE-2026-123495 Vikunja 2.0.0 before 2.7.1 accepts form-encoded bodies on the /api/v2 login and OIDC callback endpoints without CSRF or Origin...

  • CVE-2026-123496

    🚨 CVE-2026-123496 Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files...

  • CVE-2026-123497

    🚨 CVE-2026-123497 Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to...

  • CVE-2026-123498

    🚨 CVE-2026-123498 Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to inject...

  • CVE-2026-123499

    🚨 CVE-2026-123499 Vikunja veans before 2.7.1 contains a credential exposure vulnerability that allows malicious repository authors to capture API...

  • CVE-2026-123500

    🚨 CVE-2026-123500 Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created...

  • CVE-2026-123501

    🚨 CVE-2026-123501 Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust...

Статистика статей

Статьи
53,082
Просмотры
218,839
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху