CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-27896

    🚨 CVE-2025-27896 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an...

  • CVE-2025-27897

    🚨 CVE-2025-27897 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an...

  • CVE-2025-27902

    🚨 CVE-2025-27902 IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A...

  • CVE-2025-71429

    🚨 CVE-2025-71429 GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated...

  • CVE-2025-71430

    🚨 CVE-2025-71430 Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard page...

  • CVE-2025-71431

    🚨 CVE-2025-71431 Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize...

  • CVE-2025-71432

    🚨 CVE-2025-71432 Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing...

  • CVE-2025-58771

    🚨 CVE-2025-58771 AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful...

  • CVE-2026-110923

    🚨 CVE-2026-110923 A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".."...

  • CVE-2026-110925

    🚨 CVE-2026-110925 A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When...

  • CVE-2026-110926

    🚨 CVE-2026-110926 A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer...

  • CVE-2025-29896

    🚨 CVE-2025-29896 A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account...

  • CVE-2025-29897

    🚨 CVE-2025-29897 A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains...

  • CVE-2025-66272

    🚨 CVE-2025-66272 A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can...

  • CVE-2025-66275

    🚨 CVE-2025-66275 A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can...

  • CVE-2025-68403

    🚨 CVE-2025-68403 An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker...

  • CVE-2025-68404

    🚨 CVE-2025-68404 A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the...

  • CVE-2025-23390

    🚨 CVE-2025-23390 A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate...

Статистика статей

Статьи
53,084
Просмотры
237,111
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху