CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-57117

    🚨 CVE-2025-57117 A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute...

  • CVE-2025-57118

    🚨 CVE-2025-57118 An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php

  • CVE-2025-55834

    🚨 CVE-2025-55834 A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the...

  • CVE-2025-44034

    🚨 CVE-2025-44034 SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters...

  • CVE-2025-52044

    🚨 CVE-2025-52044 In Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnext/stock/utils.py is vulnerable to SQL Injection, which...

  • CVE-2025-56276

    🚨 CVE-2025-56276 code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the registration function. An...

  • CVE-2025-57119

    🚨 CVE-2025-57119 An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and...

  • CVE-2025-56280

    🚨 CVE-2025-56280 code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the area where users submit...

  • CVE-2025-56289

    🚨 CVE-2025-56289 code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak admin's...

  • CVE-2025-56293

    🚨 CVE-2025-56293 code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting (XSS) in the Add Child Information...

  • CVE-2025-56295

    🚨 CVE-2025-56295 code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP...

  • CVE-2025-57145

    🚨 CVE-2025-57145 A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The...

  • CVE-2025-56562

    🚨 CVE-2025-56562 An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only...

  • CVE-2025-57624

    🚨 CVE-2025-57624 A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code...

  • CVE-2025-57625

    🚨 CVE-2025-57625 CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse...

  • CVE-2025-56557

    🚨 CVE-2025-56557 An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.

  • CVE-2025-54391

    🚨 CVE-2025-54391 A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) allows an attacker with valid user...

  • CVE-2025-55888

    🚨 CVE-2025-55888 Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can...

Статистика статей

Статьи
53,082
Просмотры
220,230
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху