CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10275

    🚨 CVE-2025-10275 A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknown part of the file...

  • CVE-2025-10276

    🚨 CVE-2025-10276 A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the...

  • CVE-2025-10278

    🚨 CVE-2025-10278 A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer...

  • CVE-2025-55996

    🚨 CVE-2025-55996 Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface

  • CVE-2025-55835

    🚨 CVE-2025-55835 File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering.

  • CVE-2025-57577

    🚨 CVE-2025-57577 An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the...

  • CVE-2025-57578

    🚨 CVE-2025-57578 An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password

  • CVE-2025-57579

    🚨 CVE-2025-57579 An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the...

  • CVE-2025-52074

    🚨 CVE-2025-52074 PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the...

  • CVE-2025-56467

    🚨 CVE-2025-56467 An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a...

  • CVE-2025-45583

    🚨 CVE-2025-45583 Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into...

  • CVE-2025-45584

    🚨 CVE-2025-45584 Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car...

  • CVE-2025-45585

    🚨 CVE-2025-45585 Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to...

  • CVE-2025-56710

    🚨 CVE-2025-56710 A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul...

  • CVE-2025-56252

    🚨 CVE-2025-56252 Cross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execute arbitrary code via a crafted URL to...

  • CVE-2025-57248

    🚨 CVE-2025-57248 A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When...

  • CVE-2025-49089

    🚨 CVE-2025-49089 wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.

  • CVE-2025-56274

    🚨 CVE-2025-56274 SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху