CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.
  • CVE-2025-53250

    🚨 CVE-2025-53250 Server-Side Request Forgery (SSRF) vulnerability in Chartbeat Chartbeat chartbeat allows Server Side Request Forgery.This issue...
  • CVE-2025-9604

    🚨 CVE-2025-9604 A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file...
  • CVE-2025-4643

    🚨 CVE-2025-4643 Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker who has...
  • CVE-2025-4643

    🚨 CVE-2025-4644 A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious...
  • CVE-2025-9217

    🚨 CVE-2025-9217 The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36 via the...
  • CVE-2025-9646

    🚨 CVE-2025-9646 A security flaw has been discovered in O2OA up to 10.0-410. This vulnerability affects unknown code of the file...
  • CVE-2025-54080

    🚨 CVE-2025-54080 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An...
  • CVE-2025-55304

    🚨 CVE-2025-55304 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A...
  • CVE-2025-9655

    🚨 CVE-2025-9655 A weakness has been identified in O2OA up to 10.0-410. This affects an unknown part of the file...
  • CVE-2025-47909

    🚨 CVE-2025-47909 Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform...
  • CVE-2025-55202

    🚨 CVE-2025-55202 Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and...
  • CVE-2025-55750

    🚨 CVE-2025-55750 Gitpod is a developer platform for cloud development environments. In versions before main-gha.33628 for both Gitpod Classic and...
  • CVE-2025-9657

    🚨 CVE-2025-9657 A vulnerability was detected in O2OA up to 10.0-410. This issue affects some unknown processing of the file...
  • CVE-2025-9658

    🚨 CVE-2025-9658 A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /x_portal_assemble_designer/jaxrs/dict/...
  • CVE-2025-9659

    🚨 CVE-2025-9659 A vulnerability has been found in O2OA up to 10.0-410. The affected element is an unknown function of the file...
  • CVE-2025-58158

    🚨 CVE-2025-58158 Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer...
  • CVE-2025-9675

    🚨 CVE-2025-9675 A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file...
  • CVE-2025-58068

    🚨 CVE-2025-58068 Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP...

Статистика статей

Статьи
53,082
Просмотры
220,230
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху