CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-40636

    🚨 CVE-2025-40636 SQL injection vulnerability in Joomla module mod_vvisit_counter v2.0.4j3. This vulnerability allows an attacker to retrieve...

  • CVE-2025-49641

    🚨 CVE-2025-49641 A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action...

  • CVE-2025-9213

    🚨 CVE-2025-9213 The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to...

  • CVE-2025-61590

    🚨 CVE-2025-61590 Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE)...

  • CVE-2025-61591

    🚨 CVE-2025-61591 Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an...

  • CVE-2025-46817

    🚨 CVE-2025-46817 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...

  • CVE-2025-61592

    🚨 CVE-2025-61592 Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI...

  • CVE-2025-61593

    🚨 CVE-2025-61593 Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent...

  • CVE-2025-46818

    🚨 CVE-2025-46818 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...

  • CVE-2025-46819

    🚨 CVE-2025-46819 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...

  • CVE-2025-62496

    🚨 CVE-2025-62496 A vulnerability exists in the QuickJS engine's BigInt string parsing logic (js_bigint_from_string) when attempting to create a...

  • CVE-2025-25298

    🚨 CVE-2025-25298 Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enforce a maximum password length...

  • CVE-2025-53092

    🚨 CVE-2025-53092 Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration...

  • CVE-2025-62407

    🚨 CVE-2025-62407 Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the...

  • CVE-2025-62412

    🚨 CVE-2025-62412 LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not...

  • CVE-2025-71331

    🚨 CVE-2025-71331 Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages...

  • CVE-2026-66781

    🚨 CVE-2026-66781 A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity...

  • CVE-2026-66782

    🚨 CVE-2026-66782 A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху