СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
15| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-54831 Apache Airflow: Connection sensitive details exposed to users with READ permissions Apache Software Foundation / Apache Airflow · apache / airflow | Средний | 6.5 | 0,94 % | 26.09.2025 | ||
| CVE-2026-107761 Channel tokens and organization API key exposed in API responses GitroomHQ / postiz-app | Средний | 5.3 | 0,28 % | Патч | 11.10.2026 | |
| CVE-2026-0893 Uncleared Password Keystrokes Vulnerability AMI / AptioV | Средний | 5.8 | 0,1 % | 13.10.2026 | ||
| CVE-2026-33216 NATS has MQTT plaintext password disclosure nats-io / nats-server · Red Hat / Multicluster Global Hub 1.4.5 | Высокий | 8.6 | 0,37 % | 25.03.2026 | ||
| CVE-2026-55425 Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields Graylog2 / graylog2-server | Средний | 5.0 | 0,41 % | 28.08.2026 | ||
| CVE-2026-56538 HCL Connections is vulnerable to information disclosure HCLSoftware / Connections | Низкий | 3.5 | 0,27 % | 27.07.2026 | ||
| CVE-2026-6280 Improper Access Control in Nomysoft Informatics' Nomysem NOMYSOFT Informatics Education and Consulting Inc. / Nomysem | Средний | 6.5 | 0,38 % | 08.07.2026 | ||
| CVE-2025-52603 HCL Connections is vulnerable to information disclosure HCLSoftware / Connections | Низкий | 3.5 | 0,3 % | 20.02.2026 | ||
| CVE-2024-49827 IBM Concert Software information disclosure IBM / Concert Software | Низкий | 3.7 | 0,24 % | Патч | 18.08.2025 | |
| CVE-2025-4976 Exposure of Sensitive Information Due to Incompatible Policies in GitLab GitLab / GitLab | Высокий | 4.3 | 0,5 % | PoC | 24.07.2025 | |
| CVE-2025-32791 Permission policy information leakage in Backstage permission system backstage / backstage · @backstage/plugin-permission-backend | Средний | 4.3 | 0,29 % | 17.04.2025 | ||
| CVE-2024-7267 Internal infrastructure data leak in EZD RP Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy / EZD RP | Высокий | 7.1 | 0,6 % | 07.08.2024 | ||
| CVE-2025-24316 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies Dario Health / Dario Application Database and Internet-based Server Infrastructure | Средний | 6.9 | 0,31 % | 28.02.2025 | ||
| CVE-2024-49354 IBM Concert information disclosure IBM / Concert Software | Средний | 5.3 | 0,34 % | 18.01.2025 | ||
| CVE-2024-44121 Information Disclosure in SAP S/4 HANA (Statutory Reports) SAP_SE / SAP S/4 HANA (Statutory Reports) | Средний | 4.3 | 0,29 % | 10.09.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.