CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-9775

    🚨 CVE-2025-9775 A vulnerability was found in RemoteClinic up to 2.0. Impacted is an unknown function of the file /staff/edit-my-profile.php. The...

  • CVE-2025-9375

    🚨 CVE-2025-9375 XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1...

  • CVE-2025-9799

    🚨 CVE-2025-9799 A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function...

  • CVE-2025-9802

    🚨 CVE-2025-9802 A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The...

  • CVE-2025-57808

    🚨 CVE-2025-57808 ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF...

  • CVE-2025-58161

    🚨 CVE-2025-58161 MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path...

  • CVE-2025-58162

    🚨 CVE-2025-58162 MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially...

  • CVE-2025-8662

    🚨 CVE-2025-8662 OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered...

  • CVE-2025-7974

    🚨 CVE-2025-7974 rocket.chat Incorrect Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose...

  • CVE-2025-8614

    🚨 CVE-2025-8614 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to...

  • CVE-2025-58163

    🚨 CVE-2025-58163 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a...

  • CVE-2025-58351

    🚨 CVE-2025-58351 Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature...

  • CVE-2025-9821

    🚨 CVE-2025-9821 SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the...

  • CVE-2025-41000

    🚨 CVE-2025-41000 Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London. XFS is a web attack technique that exploits specific...

  • CVE-2025-9822

    🚨 CVE-2025-9822 SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not...

  • CVE-2025-58593

    🚨 CVE-2025-58593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fox by...

  • CVE-2025-58603

    🚨 CVE-2025-58603 Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2025-58605

    🚨 CVE-2025-58605 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious WP Delicious...

Статистика статей

Статьи
53,082
Просмотры
220,230
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху