CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-61189

    🚨 CVE-2025-61189 Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This...

  • CVE-2026-76281

    🚨 CVE-2026-76281 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal...

  • CVE-2026-76283

    🚨 CVE-2026-76283 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal...

  • CVE-2026-76284

    🚨 CVE-2026-76284 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal...

  • CVE-2026-76285

    🚨 CVE-2026-76285 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal...

  • CVE-2026-123990

    🚨 CVE-2026-123990 A security vulnerability has been detected in DataEase up to 2.10.27/3.1.0. Affected is the function...

  • CVE-2026-123991

    🚨 CVE-2026-123991 A vulnerability was detected in DataEase up to 2.10.27. Affected by this vulnerability is the function...

  • CVE-2025-52363

    🚨 CVE-2025-52363 Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker...

  • CVE-2025-54369

    🚨 CVE-2025-54369 Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions 5.0.1 and below, Node-SAML loads the...

  • CVE-2025-55579

    🚨 CVE-2025-55579 SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The...

  • CVE-2025-55580

    🚨 CVE-2025-55580 SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated...

  • CVE-2025-44033

    🚨 CVE-2025-44033 SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector()...

  • CVE-2025-56577

    🚨 CVE-2025-56577 An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic...

  • CVE-2025-56254

    🚨 CVE-2025-56254 PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in...

  • CVE-2025-57140

    🚨 CVE-2025-57140 rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path.

  • CVE-2025-46047

    🚨 CVE-2025-46047 A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote...

  • CVE-2025-50755

    🚨 CVE-2025-50755 Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command...

  • CVE-2025-50757

    🚨 CVE-2025-50757 Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху