CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-90869

    🚨 CVE-2026-90869 A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software...

  • CVE-2026-90870

    🚨 CVE-2026-90870 A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior...

  • CVE-2026-90871

    🚨 CVE-2026-90871 Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and...

  • CVE-2026-90872

    🚨 CVE-2026-90872 Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server...

  • CVE-2026-93680

    🚨 CVE-2026-93680 IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.

  • CVE-2026-96196

    🚨 CVE-2026-96196 Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security...

  • CVE-2026-96198

    🚨 CVE-2026-96198 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-96199

    🚨 CVE-2026-96199 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-96203

    🚨 CVE-2026-96203 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2023-7357

    🚨 CVE-2023-7357 A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability...

  • CVE-2025-12523

    🚨 CVE-2025-12523 Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

  • CVE-2026-115805

    🚨 CVE-2026-115805 Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to...

  • CVE-2026-118759

    🚨 CVE-2026-118759 Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API...

  • CVE-2026-118763

    🚨 CVE-2026-118763 sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts...

  • CVE-2026-11587

    🚨 CVE-2026-11587 SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

  • CVE-2026-102260

    🚨 CVE-2026-102260 HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API endpoints...

  • CVE-2026-107347

    🚨 CVE-2026-107347 HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that...

  • CVE-2026-116566

    🚨 CVE-2026-116566 socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be...

Статистика статей

Статьи
53,101
Просмотры
286,922
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху