CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10423

    🚨 CVE-2025-10423 A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The...

  • CVE-2025-10434

    🚨 CVE-2025-10434 A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of...

  • CVE-2025-9076

    🚨 CVE-2025-9076 Mattermost versions 10.10.x <= 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which...

  • CVE-2025-9078

    🚨 CVE-2025-9078 Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to properly...

  • CVE-2025-9072

    🚨 CVE-2025-9072 Mattermost versions 10.10.x <= 10.10.1, 10.5.x <= 10.5.9, 10.9.x <= 10.9.4 fail to validate the redirect_to parameter, allowing an...

  • CVE-2025-9084

    🚨 CVE-2025-9084 Mattermost versions 10.5.x <= 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to malicious...

  • CVE-2025-58045

    🚨 CVE-2025-58045 Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to...

  • CVE-2025-58046

    🚨 CVE-2025-58046 Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data...

  • CVE-2025-10471

    🚨 CVE-2025-10471 A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file...

  • CVE-2025-58177

    🚨 CVE-2025-58177 n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting (XSS)...

  • CVE-2025-10475

    🚨 CVE-2025-10475 A weakness has been identified in SpyShelter up to 15.4.0.1015. Affected is an unknown function in the library SpyShelter.sys of...

  • CVE-2025-59144

    🚨 CVE-2025-59144 debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after a...

  • CVE-2025-10015

    🚨 CVE-2025-10015 The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its bundled...

  • CVE-2025-10015

    🚨 CVE-2025-10016 The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unprivileged...

  • CVE-2025-59050

    🚨 CVE-2025-59050 Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data...

  • CVE-2025-10662

    🚨 CVE-2025-10662 A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file...

  • CVE-2025-10669

    🚨 CVE-2025-10669 A vulnerability was detected in Airsonic-Advanced up to 10.6.0. This vulnerability affects unknown code of the component Playlist...

  • CVE-2025-61586

    🚨 CVE-2025-61586 FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below are vulnerable to directory enumeration by setting...

Статистика статей

Статьи
53,082
Просмотры
220,230
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху