Мониторинг Все уязвимости
Открытые данные
СИТУАЦИОННЫЙ ОБЗОР

Все уязвимости

Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.

Лента уязвимостей

30
↵
УЯЗВИМОСТЬ / ПРОДУКТПРИОРИТЕТCVSSEPSSСИГНАЛЫОПУБЛИКОВАНАКарточка
CVE-2026-118180
Matrix homeserver could redirect the chat session to a local file or network share
Mozilla / Thunderbird
Высокий7.5
0,17 %
27.10.2026
CVE-2026-118177
Calendar discovery accepted local file and remote network share locations
Mozilla / Thunderbird
Критический9.1
0,18 %
27.10.2026
CVE-2026-91428
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Support
Oracle Corporation / Siebel CRM End User · oracle / siebel_crm
Средний4.3
0,2 %
21.10.2026
CVE-2026-117553
Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning
umbraco / Umbraco-CMS
Высокий7.7
0,5 %
Патч
27.10.2026
CVE-2026-121373
Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)
sensiolabs / symfony
Средний5.3
—
Патч
04.11.2026
CVE-2026-120638
CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect
Продукт уточняется
Информационный—
—
Патч
04.11.2026
CVE-2026-120636
CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form
Продукт уточняется
Информационный—
—
Патч
04.11.2026
CVE-2026-120633
CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port
Продукт уточняется
Информационный—
—
Патч
04.11.2026
CVE-2026-84389
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 thro
Fortinet / FortiSIEM
Низкий2.8
0,22 %
08.09.2026
CVE-2026-47026
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open
Oracle Corporation / PeopleSoft Enterprise PeopleTools · oracle / peoplesoft_enterprise_peopletools
Высокий7.4
0,37 %
22.07.2026
CVE-2026-47015
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA
Oracle Corporation / PeopleSoft Enterprise PeopleTools · oracle / peoplesoft_enterprise_peopletools
Высокий7.1
0,24 %
22.07.2026
CVE-2026-111754
Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
angular / angular · @angular/platform-server
Средний5.1
—
03.11.2026
CVE-2026-120953
Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler
MongoDB / Atlas SQL JDBC Driver
Средний5.1
—
03.11.2026
CVE-2026-120327
Open Redirection in extension "Mail" (mail)
TYPO3 / Extension "Mail"
Средний5.3
0,44 %
03.11.2026
CVE-2025-3155
Yelp: arbitrary file read
· Red Hat / Red Hat Enterprise Linux 8
Критический7.4
13,12 %
PoC
03.04.2025
CVE-2024-8883
Keycloak: vulnerable redirect uri validation results in open redirec
· Red Hat / Red Hat Build of Keycloak
Средний6.1
2,11 %
19.09.2024
CVE-2026-40961
Apache Airflow: Open Redirect Bypass Vulnerability
Apache Software Foundation / Apache Airflow · apache / airflow
Высокий7.2
0,65 %
Патч
01.06.2026
CVE-2026-51954
An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary...
n/a / n/a
Критический8.1
0,65 %
PoC
22.10.2026
CVE-2026-118658
Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto
labstack / echo · github.com/labstack/echo/v5
Высокий4.7
0,19 %
PoCПатч
28.10.2026
CVE-2026-118425
Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback
Red Hat / Red Hat Build of Keycloak · Red Hat / Red Hat Single Sign-On 7
Средний6.8
0,23 %
29.10.2026
CVE-2026-91296
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...
Oracle Corporation / JD Edwards EnterpriseOne Tools · oracle / jd_edwards_enterpriseone_tools
Высокий8.8
0,38 %
21.10.2026
CVE-2024-2372
Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks
WSO2 / WSO2 Open Banking AM · WSO2 / WSO2 API Manager
Средний5.4
0,2 %
02.11.2026
CVE-2024-12141
Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks
WSO2 / WSO2 Identity Server
Средний4.3
0,2 %
02.11.2026
CVE-2026-41106
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft / Microsoft 365 Copilot
Критический9.3
0,72 %
Патч
03.07.2026
CVE-2026-2376
Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface
Red Hat / mirror registry for Red Hat OpenShift · Red Hat / mirror registry for Red Hat OpenShift 2
Средний4.9
0,17 %
12.03.2026
CVE-2026-103576
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809
Средний6.5
0,86 %
Патч
13.10.2026
CVE-2026-83646
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809
Средний5.4
0,37 %
Патч
13.10.2026
CVE-2026-83500
Windows BitLocker Security Feature Bypass Vulnerability
Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809
Средний6.1
0,45 %
Патч
13.10.2026
CVE-2011-1594
Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows...
redhat / network_satellite · redhat / spacewalk
Средний6.5
1,46 %
Патч
05.02.2014
CVE-2024-4989
Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks
WSO2 / WSO2 API Manager
Средний5.4
0,17 %
Патч
21.10.2026
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.