CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10903

    🚨 CVE-2025-10903 GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before...

  • CVE-2025-62341

    🚨 CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an...

  • CVE-2025-62342

    🚨 CVE-2025-62342 HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user...

  • CVE-2025-62343

    🚨 CVE-2025-62343 HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to...

  • CVE-2025-30156

    🚨 CVE-2025-30156 Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and...

  • CVE-2025-36290

    🚨 CVE-2025-36290 IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation...

  • CVE-2025-64649

    🚨 CVE-2025-64649 IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques...

  • CVE-2025-15613

    🚨 CVE-2025-15613 Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with...

  • CVE-2025-12768

    🚨 CVE-2025-12768 A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit...

  • CVE-2025-46418

    🚨 CVE-2025-46418 Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.

  • CVE-2025-15663

    🚨 CVE-2025-15663 The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label...

  • CVE-2025-15664

    🚨 CVE-2025-15664 The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's...

  • CVE-2025-7963

    🚨 CVE-2025-7963 The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode_easywaveformplayer()...

  • CVE-2025-15481

    🚨 CVE-2025-15481 The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored...

  • CVE-2025-15485

    🚨 CVE-2025-15485 The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing...

  • CVE-2025-15489

    🚨 CVE-2025-15489 The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to...

  • CVE-2025-15490

    🚨 CVE-2025-15490 The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass...

  • CVE-2025-15692

    🚨 CVE-2025-15692 The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within...

Статистика статей

Статьи
53,084
Просмотры
237,111
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху