CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-13378

    🚨 CVE-2025-13378 The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all...

  • CVE-2025-13381

    🚨 CVE-2025-13381 The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due to a...

  • CVE-2025-13742

    🚨 CVE-2025-13742 Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an...

  • CVE-2025-12419

    🚨 CVE-2025-12419 Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth...

  • CVE-2025-12559

    🚨 CVE-2025-12559 Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email...

  • CVE-2025-12421

    🚨 CVE-2025-12421 Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token...

  • CVE-2025-66370

    🚨 CVE-2025-66370 Kivitendo before 3.9.2 allows XXE injection. By uploading an electronic invoice in the ZUGFeRD format, it is possible to read and...

  • CVE-2025-66382

    🚨 CVE-2025-66382 In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.

  • CVE-2025-66385

    🚨 CVE-2025-66385 UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g...

  • CVE-2025-66386

    🚨 CVE-2025-66386 app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.

  • CVE-2025-12638

    🚨 CVE-2025-12638 Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar...

  • CVE-2025-64715

    🚨 CVE-2025-64715 Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10...

  • CVE-2025-12756

    🚨 CVE-2025-12756 Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions...

  • CVE-2025-58044

    🚨 CVE-2025-58044 JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5...

  • CVE-2025-66205

    🚨 CVE-2025-66205 Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based...

  • CVE-2025-66206

    🚨 CVE-2025-66206 Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, certain requests were vulnerable to path...

  • CVE-2025-59391

    🚨 CVE-2025-59391 A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An...

  • CVE-2025-10882

    🚨 CVE-2025-10882 A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A...

Статистика статей

Статьи
53,082
Просмотры
213,519
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху