СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-4405 IBM Concert Software Use of Web Browser Cache Containing Sensitive Information IBM / Concert · ibm / concert | Средний | 4.0 | 0,16 % | Патч | 19.10.2026 | |
| CVE-2026-118571 Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292 Drupal / Media Alias Display | Информационный | — | 0,14 % | 30.10.2026 | ||
| CVE-2026-118550 AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270 Drupal / AI (Artificial Intelligence) | Информационный | — | 0,19 % | 30.10.2026 | ||
| CVE-2026-114548 ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247 Drupal / ImageAPI Optimize WebP | Информационный | — | 0,15 % | 30.10.2026 | ||
| CVE-2026-114546 Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245 Drupal / Media Alias Display | Информационный | — | 0,15 % | 30.10.2026 | ||
| CVE-2026-114542 Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242 Drupal / Simple OAuth (OAuth2) & OpenID Connect | Информационный | — | 0,15 % | 30.10.2026 | ||
| CVE-2026-41322 @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed withastro / astro · @astrojs/node | Высокий | 5.3 | 0,29 % | PoC | 24.04.2026 | |
| CVE-2026-87940 Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138 Drupal / Key auth | Средний | 5.4 | 0,23 % | 22.10.2026 | ||
| CVE-2026-96369 Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 Drupal / Webform | Низкий | 3.1 | 0,21 % | 22.10.2026 | ||
| CVE-2026-13697 undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives undici / undici · undici | Высокий | 7.4 | 0,57 % | 29.07.2026 | ||
| CVE-2024-45314 Flask-AppBuilder login form allows browser to cache sensitive fields dpgaspar / Flask-AppBuilder · flask-appbuilder | Низкий | 3.6 | 0,27 % | 04.09.2024 | ||
| CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache Apache Software Foundation / Apache Airflow · apache-airflow | Средний | 5.5 | 0,32 % | Патч | 14.06.2024 | |
| CVE-2024-23571 HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate cachi HCLSoftware / Aftermarket EPC | Средний | 4.3 | 0,3 % | 17.07.2026 | ||
| CVE-2026-41918 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The Siemens / RUGGEDCOM RST2428P | Средний | 5.9 | 0,19 % | 02.06.2026 | ||
| CVE-2026-24437 Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages Shenzhen Tenda Technology Co., Ltd. / W30E V2 | Средний | 4.8 | 0,17 % | 26.01.2026 | ||
| CVE-2026-27514 Tenda F3 Plaintext Credential Exposure in Configuration Download Shenzhen Tenda Technology Co., Ltd. / Tenda F3 | Высокий | 7.1 | 0,25 % | 23.02.2026 | ||
| CVE-2025-15554 Admin Passwords Cached by Browsers in Truesec LAPSWebUI Truesec / LAPSWebUI | Средний | 6.0 | 0,15 % | 16.03.2026 | ||
| CVE-2025-36364 IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters. IBM / DevOps Plan | Средний | 6.2 | 0,12 % | Патч | 03.03.2026 | |
| CVE-2025-52659 HCL AION is affected by a Cacheable HTTP Response vulnerability HCL Software / AION | Низкий | 2.8 | 0,19 % | 19.01.2026 | ||
| CVE-2025-13083 Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 Drupal / Drupal core | Низкий | 3.7 | 0,28 % | 18.11.2025 | ||
| CVE-2025-62276 The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and o Liferay / Portal · Liferay / DXP | Средний | 4.6 | 0,13 % | 01.11.2025 | ||
| CVE-2025-52625 HCL AION is susceptible to Cacheable SSL Page Found vulnerability HCL / AION | Низкий | 3.7 | 0,24 % | 10.10.2025 | ||
| CVE-2025-36082 IBM OpenPages information disclosure IBM / OpenPages | Средний | 4.0 | 0,13 % | Патч | 15.09.2025 | |
| CVE-2025-1334 IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure IBM / QRadar Suite Software · IBM / Cloud Pak for Security | Средний | 4.0 | 0,18 % | Патч | 03.06.2025 | |
| CVE-2025-1348 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure IBM / Sterling B2B Integrator | Средний | 4.0 | 0,15 % | Патч | 18.06.2025 | |
| CVE-2025-48947 NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies auth0 / nextjs-auth0 · @auth0/nextjs-auth0 | Высокий | 7.7 | 0,44 % | 04.06.2025 | ||
| CVE-2025-27525 Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager Hitachi / JP1/IT Desktop Management 2 - Smart Device Manager | Низкий | 3.9 | 0,15 % | 15.05.2025 | ||
| CVE-2024-31906 IBM Automation Decision Services information disclosure IBM / Automation Decision Services | Средний | 6.2 | 0,18 % | 26.01.2025 | ||
| CVE-2024-22349 IBM UrbanCode Velocity information disclosure IBM / UrbanCode Velocity · IBM / DevOps Velocity | Средний | 4.0 | 0,21 % | 20.01.2025 | ||
| CVE-2024-22333 IBM Maximo Application Suite information disclosure IBM / Maximo Application Suite · IBM / Maximo Asset Management | Низкий | 3.3 | 0,18 % | 13.06.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.