CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-57907

    🚨 CVE-2025-57907 Missing Authorization vulnerability in Heureka Group Heureka heureka allows Accessing Functionality Not Properly Constrained by...

  • CVE-2025-57919

    🚨 CVE-2025-57919 Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue...

  • CVE-2025-57947

    🚨 CVE-2025-57947 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Photo Gallery by...

  • CVE-2025-57991

    🚨 CVE-2025-57991 Missing Authorization vulnerability in Clariti Clariti clariti allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2025-58000

    🚨 CVE-2025-58000 Missing Authorization vulnerability in memberful Memberful - Membership Plugin memberful-wp allows Accessing Functionality Not...

  • CVE-2025-58199

    🚨 CVE-2025-58199 Cross-Site Request Forgery (CSRF) vulnerability in Fastly Fastly fastly allows Cross Site Request Forgery.This issue affects...

  • CVE-2025-58651

    🚨 CVE-2025-58651 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PlayerJS PlayerJS playerjs...

  • CVE-2025-58679

    🚨 CVE-2025-58679 Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Control...

  • CVE-2025-58680

    🚨 CVE-2025-58680 Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control...

  • CVE-2025-58689

    🚨 CVE-2025-58689 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tapfiliate Tapfiliate...

  • CVE-2025-58962

    🚨 CVE-2025-58962 Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio publitio allows Server Side Request Forgery.This issue...

  • CVE-2025-59562

    🚨 CVE-2025-59562 Authorization Bypass Through User-Controlled Key vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly...

  • CVE-2025-59568

    🚨 CVE-2025-59568 Cross-Site Request Forgery (CSRF) vulnerability in Zoho Flow Zoho Flow zoho-flow allows Cross Site Request Forgery.This issue...

  • CVE-2025-9960

    🚨 CVE-2025-9960 A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF). This...

  • CVE-2025-59433

    🚨 CVE-2025-59433 Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. Prior to version...

  • CVE-2025-1131

    🚨 CVE-2025-1131 A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When...

  • CVE-2025-58246

    🚨 CVE-2025-58246 Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The...

  • CVE-2025-58674

    🚨 CVE-2025-58674 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху