CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-59950

    🚨 CVE-2025-59950 FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection...

  • CVE-2025-49844

    🚨 CVE-2025-49844 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...

  • CVE-2025-10692

    🚨 CVE-2025-10692 The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE...

  • CVE-2025-10695

    🚨 CVE-2025-10695 Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied...

  • CVE-2025-10696

    🚨 CVE-2025-10696 OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not...

  • CVE-2025-59944

    🚨 CVE-2025-59944 Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor...

  • CVE-2025-61685

    🚨 CVE-2025-61685 Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to...

  • CVE-2025-11276

    🚨 CVE-2025-11276 A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component...

  • CVE-2025-11288

    🚨 CVE-2025-11288 A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file...

  • CVE-2025-8406

    🚨 CVE-2025-8406 ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses...

  • CVE-2025-11290

    🚨 CVE-2025-11290 A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler...

  • CVE-2025-59729

    🚨 CVE-2025-59729 When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration...

  • CVE-2025-59730

    🚨 CVE-2025-59730 When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it. Frames...

  • CVE-2025-59731

    🚨 CVE-2025-59731 When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not...

  • CVE-2025-59732

    🚨 CVE-2025-59732 When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are...

  • CVE-2025-59733

    🚨 CVE-2025-59733 When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the...

  • CVE-2025-59734

    🚨 CVE-2025-59734 It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2. When a...

  • CVE-2025-11331

    🚨 CVE-2025-11331 A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху