CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10682

    🚨 CVE-2025-10682 The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to...

  • CVE-2025-59419

    🚨 CVE-2025-59419 Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the...

  • CVE-2025-62379

    🚨 CVE-2025-62379 Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint...

  • CVE-2025-41443

    🚨 CVE-2025-41443 Mattermost versions 10.5.x <= 10.5.12, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when accessing channel...

  • CVE-2025-10545

    🚨 CVE-2025-10545 Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when adding channel...

  • CVE-2025-41410

    🚨 CVE-2025-41410 Mattermost versions 10.10.x <= 10.10.2, 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to validate email ownership during Slack...

  • CVE-2025-54499

    🚨 CVE-2025-54499 Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to use constant-time comparison for sensitive string comparisons...

  • CVE-2025-58073

    🚨 CVE-2025-58073 Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a...

  • CVE-2025-58075

    🚨 CVE-2025-58075 Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a...

  • CVE-2025-3930

    🚨 CVE-2025-3930 Strapi uses JSON Web Tokens (JWT) for authentication. After logout or account deactivation, the JWT is not invalidated, which...

  • CVE-2025-55035

    🚨 CVE-2025-55035 Mattermost Desktop App versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that...

  • CVE-2025-62490

    🚨 CVE-2025-62490 In quickjs, in js_print_object, when printing an array, the function first fetches the array length and then loops over it. The...

  • CVE-2025-62491

    🚨 CVE-2025-62491 A Use-After-Free (UAF) vulnerability exists in the QuickJS engine's standard library when iterating over the global list of...

  • CVE-2025-62492

    🚨 CVE-2025-62492 A vulnerability stemming from floating-point arithmetic precision errors exists in the QuickJS engine's implementation of...

  • CVE-2025-62493

    🚨 CVE-2025-62493 A vulnerability exists in the QuickJS engine's BigInt string conversion logic (js_bigint_to_string1) due to an incorrect...

  • CVE-2025-62495

    🚨 CVE-2025-62495 An integer overflow vulnerability exists in the QuickJS regular expression engine (libregexp) due to an inconsistent...

  • CVE-2025-62414

    🚨 CVE-2025-62414 Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the “Create New Customer” feature (in the admin panel)...

  • CVE-2025-62415

    🚨 CVE-2025-62415 Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an...

Статистика статей

Статьи
53,082
Просмотры
218,839
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху