CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-59715

    🚨 CVE-2025-59715 SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.

  • CVE-2025-9906

    🚨 CVE-2025-9906 The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create...

  • CVE-2025-10707

    🚨 CVE-2025-10707 A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file...

  • CVE-2025-10710

    🚨 CVE-2025-10710 A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This affects an unknown part of the file /index.php...

  • CVE-2025-10711

    🚨 CVE-2025-10711 A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This vulnerability affects unknown code of the...

  • CVE-2025-10712

    🚨 CVE-2025-10712 A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the...

  • CVE-2025-9905

    🚨 CVE-2025-9905 The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One can create...

  • CVE-2025-59344

    🚨 CVE-2025-59344 AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery (SSRF) vulnerability...

  • CVE-2025-59431

    🚨 CVE-2025-59431 MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is...

  • CVE-2025-9079

    🚨 CVE-2025-9079 Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate...

  • CVE-2025-9081

    🚨 CVE-2025-9081 Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authenticated...

  • CVE-2025-10758

    🚨 CVE-2025-10758 A security vulnerability has been detected in htmly up to 3.1.0. The impacted element is an unknown function of the file...

  • CVE-2025-10760

    🚨 CVE-2025-10760 A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file...

  • CVE-2025-10761

    🚨 CVE-2025-10761 A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the component Login...

  • CVE-2025-10763

    🚨 CVE-2025-10763 A vulnerability was determined in academico-sis academico up to d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab. Affected by this issue...

  • CVE-2025-10778

    🚨 CVE-2025-10778 A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file...

  • CVE-2025-10787

    🚨 CVE-2025-10787 A vulnerability was found in MuYuCMS up to 2.7. Impacted is an unknown function of the file /index/index.html of the component...

  • CVE-2025-59420

    🚨 CVE-2025-59420 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху