CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2013-1840

    🚨 CVE-2013-1840 A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when...

  • CVE-2013-1815

    🚨 CVE-2013-1815 A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file...

  • CVE-2012-3427

    🚨 CVE-2012-3427 A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permissions (755)...

  • CVE-2011-1594

    🚨 CVE-2011-1594 A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to...

  • CVE-2011-2920

    🚨 CVE-2011-2920 A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote...

  • CVE-2011-2927

    🚨 CVE-2011-2927 A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows...

  • CVE-2011-3344

    🚨 CVE-2011-3344 A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup...

  • CVE-2012-0059

    🚨 CVE-2012-0059 A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call...

  • CVE-2023-4813

    🚨 CVE-2023-4813 A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed...

  • CVE-2024-9341

    🚨 CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to...

  • CVE-2024-9676

    🚨 CVE-2024-9676 A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can...

  • CVE-2024-12397

    🚨 CVE-2024-12397 A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests...

  • CVE-2024-11831

    🚨 CVE-2024-11831 A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly...

  • CVE-2025-6017

    🚨 CVE-2025-6017 A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12...

  • CVE-2025-57848

    🚨 CVE-2025-57848 A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the...

  • CVE-2025-13204

    🚨 CVE-2025-13204 npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use...

  • CVE-2025-11537

    🚨 CVE-2025-11537 A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined...

  • CVE-2026-18477

    🚨 CVE-2026-18477 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker...

Статистика статей

Статьи
53,101
Просмотры
286,495
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху