CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10249

    🚨 CVE-2025-10249 The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing...

  • CVE-2025-11340

    🚨 CVE-2025-11340 GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain...

  • CVE-2025-2934

    🚨 CVE-2025-2934 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4...

  • CVE-2025-32916

    🚨 CVE-2025-32916 Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and...

  • CVE-2025-32919

    🚨 CVE-2025-32919 Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation...

  • CVE-2025-39664

    🚨 CVE-2025-39664 Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated...

  • CVE-2025-55200

    🚨 CVE-2025-55200 BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored...

  • CVE-2025-61601

    🚨 CVE-2025-61601 BigBlueButton is an open-source virtual classroom. A Denial of Service (DoS) vulnerability in versions prior to 3.0.13 allows any...

  • CVE-2025-61602

    🚨 CVE-2025-61602 BigBlueButton is an open-source virtual classroom. A denial-of-service (DoS) vulnerability in versions prior to 3.0.13 allows any...

  • CVE-2025-61773

    🚨 CVE-2025-61773 pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface...

  • CVE-2025-61928

    🚨 CVE-2025-61928 Better Auth is an authentication and authorization library for TypeScript. In versions prior to 1.3.26, unauthenticated attackers...

  • CVE-2025-7374

    🚨 CVE-2025-7374 The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to authorization bypass in all versions up to, and...

  • CVE-2025-7781

    🚨 CVE-2025-7781 The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Stored Cross-Site Scripting via the...

  • CVE-2025-48043

    🚨 CVE-2025-48043 Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 0.1.1 before...

  • CVE-2025-59530

    🚨 CVE-2025-59530 quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or...

  • CVE-2025-11580

    🚨 CVE-2025-11580 A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation...

  • CVE-2025-11581

    🚨 CVE-2025-11581 A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file...

  • CVE-2025-61919

    🚨 CVE-2025-61919 Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, `Rack::Request#POST` reads the entire...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху