CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-62416

    🚨 CVE-2025-62416 Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection (SSTI) due...

  • CVE-2025-62417

    🚨 CVE-2025-62417 Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character (for...

  • CVE-2025-62418

    🚨 CVE-2025-62418 Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an...

  • CVE-2025-11896

    🚨 CVE-2025-11896 In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.

  • CVE-2025-62506

    🚨 CVE-2025-62506 MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation...

  • CVE-2025-11849

    🚨 CVE-2025-11849 Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0...

  • CVE-2025-48044

    🚨 CVE-2025-48044 Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 3.6.3 before...

  • CVE-2025-26625

    🚨 CVE-2025-26625 Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git...

  • CVE-2025-49655

    🚨 CVE-2025-49655 Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including...

  • CVE-2025-59043

    🚨 CVE-2025-59043 OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after...

  • CVE-2025-62353

    🚨 CVE-2025-62353 A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files...

  • CVE-2025-62168

    🚨 CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in...

  • CVE-2025-62171

    🚨 CVE-2025-62171 ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions...

  • CVE-2025-62419

    🚨 CVE-2025-62419 DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability...

  • CVE-2025-62420

    🚨 CVE-2025-62420 DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC driver bypass vulnerability...

  • CVE-2025-62421

    🚨 CVE-2025-62421 DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting...

  • CVE-2025-62422

    🚨 CVE-2025-62422 DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the...

  • CVE-2025-34282

    🚨 CVE-2025-34282 ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху