CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-55849

    🚨 CVE-2025-55849 WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee

  • CVE-2025-52389

    🚨 CVE-2025-52389 An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to...

  • CVE-2025-52288

    🚨 CVE-2025-52288 Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build.c, the Access and Mobility Management...

  • CVE-2025-52277

    🚨 CVE-2025-52277 Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to...

  • CVE-2025-52322

    🚨 CVE-2025-52322 An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session Request...

  • CVE-2025-57057

    🚨 CVE-2025-57057 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore...

  • CVE-2025-57058

    🚨 CVE-2025-57058 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable...

  • CVE-2025-57059

    🚨 CVE-2025-57059 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function...

  • CVE-2025-57061

    🚨 CVE-2025-57061 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the...

  • CVE-2025-57086

    🚨 CVE-2025-57086 Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode...

  • CVE-2025-57665

    🚨 CVE-2025-57665 Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a...

  • CVE-2025-29089

    🚨 CVE-2025-29089 An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obtain sensitive information

  • CVE-2025-57060

    🚨 CVE-2025-57060 Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store...

  • CVE-2025-57278

    🚨 CVE-2025-57278 The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper...

  • CVE-2025-44594

    🚨 CVE-2025-44594 halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in...

  • CVE-2025-44595

    🚨 CVE-2025-44595 Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.

  • CVE-2025-57633

    🚨 CVE-2025-57633 A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute...

  • CVE-2025-56556

    🚨 CVE-2025-56556 An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху