СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
16| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-87016 Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite open-webui / open-webui · open-webui | Критический | 8.1 | 0,6 % | PoC | 10.09.2026 | |
| CVE-2026-85724 Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass moquette-io / moquette | Критический | 9.6 | 0,32 % | PoC | 23.09.2026 | |
| CVE-2026-73412 Shescape: Path disclosure on Unix with Zsh ericcornelissen / shescape · shescape | Средний | 6.3 | 0,61 % | 12.08.2026 | ||
| CVE-2026-68939 Pyenv: Glob/wildcard metacharacters bypass is_version_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual) pyenv / pyenv | Средний | 2.0 | 0,17 % | PoC | 18.08.2026 | |
| CVE-2026-49482 ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite MacWarrior / clipbucket-v5 | Высокий | 4.3 | 0,2 % | PoC | 12.06.2026 | |
| CVE-2025-4232 GlobalProtect: Authenticated Code Injection Through Wildcard on macOS Palo Alto Networks / GlobalProtect App | Высокий | 8.5 | 0,45 % | 13.06.2025 | ||
| CVE-2025-11757 Improper Neutralization of Wildcards or Matching Symbols in CloudEdge Online Cameras and App CloudEdge / CloudEdge App | Высокий | 8.7 | 0,32 % | 21.10.2025 | ||
| CVE-2024-6509 Marinus Pfund, member of the AXIS OS Bug Bounty Program,
has found the VAPIX API alwaysmulti.cgi wa Axis Communications AB / AXIS OS | Средний | 6.5 | 0,4 % | 10.09.2024 | ||
| CVE-2025-27515 Laravel has a File Validation Bypass laravel / framework | Средний | 6.9 | 0,75 % | 05.03.2025 | ||
| CVE-2025-24376 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources kubewarden / kubewarden-controller | Средний | 6.5 | 0,35 % | 30.01.2025 | ||
| CVE-2025-0681 New Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols New Rock Technologies / OM500 IP-PBX · New Rock Technologies / MX8G VoIP Gateway | Средний | 6.9 | 0,18 % | 30.01.2025 | ||
| CVE-2025-0106 Expedition: Wildcard Expansion Vulnerability Palo Alto Networks / Cloud NGFW · Palo Alto Networks / Expedition | Средний | 6.9 | 0,47 % | 11.01.2025 | ||
| CVE-2024-47791 Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols Ruijie / Reyee OS · ruijie / reyee_os | Высокий | 8.7 | 0,39 % | 06.12.2024 | ||
| CVE-2024-0054 Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi Axis Communications AB / AXIS OS | Средний | 6.5 | 0,58 % | 19.03.2024 | ||
| CVE-2024-0055 Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi Axis Communications AB / AXIS OS | Средний | 6.5 | 0,6 % | 19.03.2024 | ||
| CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) Palo Alto Networks / PAN-OS · Palo Alto Networks / Cloud NGFW | Средний | 6.7 | 0,24 % | 11.09.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.