CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-56263

    🚨 CVE-2025-56263 by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary...

  • CVE-2025-56264

    🚨 CVE-2025-56264 The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.

  • CVE-2025-57631

    🚨 CVE-2025-57631 SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module

  • CVE-2025-50255

    🚨 CVE-2025-50255 Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request.

  • CVE-2025-57295

    🚨 CVE-2025-57295 H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The...

  • CVE-2025-57528

    🚨 CVE-2025-57528 An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the...

  • CVE-2025-56869

    🚨 CVE-2025-56869 Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to...

  • CVE-2025-57644

    🚨 CVE-2025-57644 Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature. An authenticated...

  • CVE-2025-52367

    🚨 CVE-2025-52367 Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle...

  • CVE-2025-45326

    🚨 CVE-2025-45326 An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.

  • CVE-2025-51005

    🚨 CVE-2025-51005 A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is...

  • CVE-2025-26278

    🚨 CVE-2025-26278 A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a...

  • CVE-2025-55795

    🚨 CVE-2025-55795 The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership...

  • CVE-2025-51495

    🚨 CVE-2025-51495 An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted...

  • CVE-2025-56234

    🚨 CVE-2025-56234 AT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the processing of TCP RST packets...

  • CVE-2025-56795

    🚨 CVE-2025-56795 Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsanitized...

  • CVE-2025-56807

    🚨 CVE-2025-56807 A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to...

  • CVE-2025-57197

    🚨 CVE-2025-57197 In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху