CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-54599

    🚨 CVE-2025-54599 The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO...

  • CVE-2025-55372

    🚨 CVE-2025-55372 An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via...

  • CVE-2025-57611

    🚨 CVE-2025-57611 An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump() method...

  • CVE-2025-55763

    🚨 CVE-2025-55763 Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code...

  • CVE-2025-57612

    🚨 CVE-2025-57612 An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name() method...

  • CVE-2025-57613

    🚨 CVE-2025-57613 An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input()...

  • CVE-2025-57614

    🚨 CVE-2025-57614 An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid input vulnerability in the cached...

  • CVE-2025-57615

    🚨 CVE-2025-57615 An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new...

  • CVE-2025-57616

    🚨 CVE-2025-57616 An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A use-after-free vulnerability in the write_interleaved method...

  • CVE-2025-55472

    🚨 CVE-2025-55472 SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises...

  • CVE-2025-55473

    🚨 CVE-2025-55473 Asian Arts Talents Foundation (AATF) Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting (XSS)...

  • CVE-2025-55474

    🚨 CVE-2025-55474 Many Notes 0.10.1 is vulnerable to Cross Site Scripting (XSS), which allows malicious Markdown files to execute JavaScript when...

  • CVE-2025-32098

    🚨 CVE-2025-32098 An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM...

  • CVE-2025-32100

    🚨 CVE-2025-32100 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200...

  • CVE-2025-50565

    🚨 CVE-2025-50565 Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an...

  • CVE-2025-51966

    🚨 CVE-2025-51966 A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1. When a user previews a...

  • CVE-2025-55476

    🚨 CVE-2025-55476 FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET...

  • CVE-2025-55824

    🚨 CVE-2025-55824 ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху