CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105931

    🚨 CVE-2026-105931 The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and...

  • CVE-2026-113870

    🚨 CVE-2026-113870 MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable...

  • CVE-2026-114406

    🚨 CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple...

  • CVE-2026-76408

    🚨 CVE-2026-76408 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal...

  • CVE-2026-76529

    🚨 CVE-2026-76529 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal...

  • CVE-2026-114221

    🚨 CVE-2026-114221 NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger...

  • CVE-2026-114222

    🚨 CVE-2026-114222 NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass...

  • CVE-2026-114223

    🚨 CVE-2026-114223 NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers...

  • CVE-2026-105270

    🚨 CVE-2026-105270 Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an unauthenticated...

  • CVE-2026-114460

    🚨 CVE-2026-114460 A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an...

  • CVE-2026-110974

    🚨 CVE-2026-110974 The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit...

  • CVE-2026-21811

    🚨 CVE-2026-21811 HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible...

  • CVE-2026-86696

    🚨 CVE-2026-86696 Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker...

  • CVE-2026-93471

    🚨 CVE-2026-93471 Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated...

  • CVE-2026-113582

    🚨 CVE-2026-113582 UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to access...

  • CVE-2026-114485

    🚨 CVE-2026-114485 Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows...

  • CVE-2026-114486

    🚨 CVE-2026-114486 Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an...

  • CVE-2026-115450

    🚨 CVE-2026-115450 External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Template...

Статистика статей

Статьи
53,101
Просмотры
286,495
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху