CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-10954

    🚨 CVE-2025-10954 Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic...

  • CVE-2025-3193

    🚨 CVE-2025-3193 Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the...

  • CVE-2025-8014

    🚨 CVE-2025-8014 Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to...

  • CVE-2025-11071

    🚨 CVE-2025-11071 A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php...

  • CVE-2025-10341

    🚨 CVE-2025-10341 HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user...

  • CVE-2025-10343

    🚨 CVE-2025-10343 HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user...

  • CVE-2025-10344

    🚨 CVE-2025-10344 HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user...

  • CVE-2025-10345

    🚨 CVE-2025-10345 HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user...

  • CVE-2025-10346

    🚨 CVE-2025-10346 HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user...

  • CVE-2025-11146

    🚨 CVE-2025-11146 Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts...

  • CVE-2025-11147

    🚨 CVE-2025-11147 Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be executed in...

  • CVE-2025-9648

    🚨 CVE-2025-9648 A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service...

  • CVE-2025-54591

    🚨 CVE-2025-54591 FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below expose information about feeds and tags of default...

  • CVE-2025-54592

    🚨 CVE-2025-54592 FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout...

  • CVE-2025-54875

    🚨 CVE-2025-54875 FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can...

  • CVE-2025-57769

    🚨 CVE-2025-57769 FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially crafted...

  • CVE-2025-59933

    🚨 CVE-2025-59933 libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is...

  • CVE-2025-59948

    🚨 CVE-2025-59948 FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху