CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-59835

    🚨 CVE-2025-59835 LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can...

  • CVE-2025-61666

    🚨 CVE-2025-61666 Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default...

  • CVE-2025-61589

    🚨 CVE-2025-61589 Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding...

  • CVE-2025-61597

    🚨 CVE-2025-61597 Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored...

  • CVE-2025-61599

    🚨 CVE-2025-61599 Emlog is an open source website building system. A stored Cross-Site Scripting (XSS) vulnerability exists in the "Twitter"feature...

  • CVE-2025-27231

    🚨 CVE-2025-27231 The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a...

  • CVE-2025-27236

    🚨 CVE-2025-27236 A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to...

  • CVE-2025-27237

    🚨 CVE-2025-27237 In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users...

  • CVE-2025-8877

    🚨 CVE-2025-8877 The AffiliateWP plugin for WordPress is vulnerable to SQL Injection via the ajax_get_affiliate_id_from_login function in all...

  • CVE-2025-40647

    🚨 CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation...

  • CVE-2025-40648

    🚨 CVE-2025-40648 Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation...

  • CVE-2025-58054

    🚨 CVE-2025-58054 Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing...

  • CVE-2025-58055

    🚨 CVE-2025-58055 Discourse is an open-source community discussion platform. In versions 3.5.0 and below, the Discourse AI suggestion endpoints for...

  • CVE-2025-58769

    🚨 CVE-2025-58769 auth0-PHP is an SDK for Auth0 Authentication and Management APIs. In versions 3.3.0 through 8.16.0, the Bulk User Import endpoint...

  • CVE-2025-59337

    🚨 CVE-2025-59337 Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded...

  • CVE-2025-54811

    🚨 CVE-2025-54811 OpenPLC_V3 has a vulnerability in the enipThread function that occurs due to the lack of a return value. This leads to a crash...

  • CVE-2025-61588

    🚨 CVE-2025-61588 RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In...

  • CVE-2025-40645

    🚨 CVE-2025-40645 Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive...

Статистика статей

Статьи
53,082
Просмотры
220,230
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху