CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-58611

    🚨 CVE-2025-58611 Cross-Site Request Forgery (CSRF) vulnerability in Tickera Tickera tickera-event-ticketing-system allows Cross Site Request...

  • CVE-2025-9823

    🚨 CVE-2025-9823 SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another...

  • CVE-2025-58056

    🚨 CVE-2025-58056 Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol...

  • CVE-2025-58057

    🚨 CVE-2025-58057 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance...

  • CVE-2025-6984

    🚨 CVE-2025-6984 The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks...

  • CVE-2025-55305

    🚨 CVE-2025-55305 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5...

  • CVE-2025-58783

    🚨 CVE-2025-58783 Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control...

  • CVE-2025-58812

    🚨 CVE-2025-58812 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PriceListo Best Restaurant...

  • CVE-2025-58842

    🚨 CVE-2025-58842 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in givecloud Donation Forms WP...

  • CVE-2025-57807

    🚨 CVE-2025-57807 ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than...

  • CVE-2025-58437

    🚨 CVE-2025-58437 Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0...

  • CVE-2025-48042

    🚨 CVE-2025-48042 Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels...

  • CVE-2025-40641

    🚨 CVE-2025-40641 Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to...

  • CVE-2025-58450

    🚨 CVE-2025-58450 pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in...

  • CVE-2025-10115

    🚨 CVE-2025-10115 A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This...

  • CVE-2025-10116

    🚨 CVE-2025-10116 A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file...

  • CVE-2025-10117

    🚨 CVE-2025-10117 A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file...

  • CVE-2025-10121

    🚨 CVE-2025-10121 A flaw has been found in uverif up to 3.2. This affects the function addbatch of the file /admin/kami_list. This manipulation of...

Статистика статей

Статьи
53,082
Просмотры
220,230
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху