СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
18| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Высокий | 5.3 | 0,13 % | PoC | 06.10.2026 | |
| CVE-2026-104040 Sssd: sssd: information disclosure via odata injection in entra id lookups Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Высокий | 6.1 | 0,12 % | PoC | 06.10.2026 | |
| CVE-2026-47162 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name vim / vim · Red Hat / Red Hat Enterprise Linux 10 | Высокий | 7.3 | 0,28 % | 11.06.2026 | ||
| CVE-2026-6322 fast-uri vulnerable to host confusion via percent-encoded authority delimiters fast-uri / fast-uri · Red Hat / Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Высокий | 7.5 | 0,51 % | 05.05.2026 | ||
| CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library Cesanta / Mongoose Web Server · Siemens / Reyrolle 7SR5 | Средний | 4.0 | 0,24 % | 18.11.2024 | ||
| CVE-2024-42385 Improper Neutralization of Delimiters in Mongoose Web Server library Cesanta / Mongoose Web Server · Siemens / Reyrolle 7SR5 | Средний | 4.0 | 0,1 % | 18.11.2024 | ||
| CVE-2025-48879 OctoPrint Vulnerable to Denial of Service through malformed HTTP request OctoPrint / OctoPrint · octoprint | Средний | 6.5 | 0,26 % | 10.06.2025 | ||
| CVE-2026-33455 Livestatus injection in monitoring quicksearch Checkmk GmbH / Checkmk | Средний | 5.3 | 0,18 % | 10.04.2026 | ||
| CVE-2026-33456 Potential livestatus injection in notification test Checkmk GmbH / Checkmk | Средний | 5.1 | 0,2 % | 10.04.2026 | ||
| CVE-2026-33457 Potential livestatus injection in prediction graph page Checkmk GmbH / Checkmk | Средний | 5.3 | 0,18 % | 10.04.2026 | ||
| CVE-2026-21691 iccDEV has Type Confusion in CIccTag:IsTypeCompressed() InternationalColorConsortium / iccDEV | Средний | 5.4 | 0,29 % | 08.01.2026 | ||
| CVE-2025-47779 Using malformed From header can forge identity with ";" or NULL in name portion asterisk / asterisk | Высокий | 7.7 | 0,53 % | 22.05.2025 | ||
| CVE-2024-38866 Livestatus Injection in dynmaps Nagvis / Nagvis | Средний | 5.3 | 0,42 % | 27.05.2025 | ||
| CVE-2025-52989 Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration Juniper Networks / Junos OS · Juniper Networks / Junos OS Evolved | Средний | 6.8 | 0,14 % | 11.07.2025 | ||
| CVE-2025-32918 Livestatus injection in autocomplete endpoint Checkmk GmbH / Checkmk | Средний | 5.3 | 0,39 % | 04.07.2025 | ||
| CVE-2024-38865 Livestatus command injection in RestAPI Checkmk GmbH / Checkmk | Средний | 6.0 | 0,88 % | 10.04.2025 | ||
| CVE-2024-42482 fish-shop/syntax-check Improper Neutralization of Delimiters fish-shop / syntax-check | Средний | 4.8 | 0,82 % | 12.08.2024 | ||
| CVE-2024-6542 Livestatus injection in mknotifyd Checkmk GmbH / Checkmk · checkmk / checkmk | Средний | 6.5 | 0,48 % | 22.07.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.