CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-56803

    🚨 CVE-2025-56803 Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can...

  • CVE-2025-56139

    🚨 CVE-2025-56139 LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when...

  • CVE-2025-57263

    🚨 CVE-2025-57263 An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL...

  • CVE-2025-57576

    🚨 CVE-2025-57576 PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.

  • CVE-2025-58375

    🚨 CVE-2025-58375 Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure...

  • CVE-2025-10070

    🚨 CVE-2025-10070 A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /enturmacao-em-lote/. This...

  • CVE-2025-10071

    🚨 CVE-2025-10071 A vulnerability has been found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file...

  • CVE-2025-10074

    🚨 CVE-2025-10074 A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file...

  • CVE-2025-22956

    🚨 CVE-2025-22956 OPSI before 4.3 allows any client to retrieve any ProductPropertyState, including those of other clients. This can lead to...

  • CVE-2025-52161

    🚨 CVE-2025-52161 Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting (XSS) vulnerability.

  • CVE-2025-55998

    🚨 CVE-2025-55998 A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to...

  • CVE-2025-56630

    🚨 CVE-2025-56630 FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.

  • CVE-2025-57141

    🚨 CVE-2025-57141 rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc.

  • CVE-2025-10099

    🚨 CVE-2025-10099 A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of...

  • CVE-2025-56265

    🚨 CVE-2025-56265 An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to...

  • CVE-2025-56266

    🚨 CVE-2025-56266 A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a...

  • CVE-2025-56267

    🚨 CVE-2025-56267 A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code...

  • CVE-2025-57285

    🚨 CVE-2025-57285 codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (lib/utils.js). The execSync command...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху