CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-11935

    🚨 CVE-2025-11935 With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the...

  • CVE-2025-65106

    🚨 CVE-2025-65106 LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a...

  • CVE-2025-65107

    🚨 CVE-2025-65107 Langfuse is an open source large language model engineering platform. In versions from 2.95.0 to before 2.95.12 and from 3.17.0...

  • CVE-2025-11931

    🚨 CVE-2025-11931 Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the...

  • CVE-2025-11932

    🚨 CVE-2025-11932 The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information...

  • CVE-2025-11934

    🚨 CVE-2025-11934 Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on...

  • CVE-2025-12888

    🚨 CVE-2025-12888 Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler...

  • CVE-2025-12889

    🚨 CVE-2025-12889 With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the...

  • CVE-2025-62703

    🚨 CVE-2025-62703 Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and...

  • CVE-2025-65942

    🚨 CVE-2025-65942 VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23...

  • CVE-2025-65953

    🚨 CVE-2025-65953 NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.22.5, a Heap-Use-After-Free (UAF)...

  • CVE-2025-66019

    🚨 CVE-2025-66019 pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can...

  • CVE-2025-66263

    🚨 CVE-2025-66263 Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter...

  • CVE-2025-62593

    🚨 CVE-2025-62593 Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a...

  • CVE-2025-66035

    🚨 CVE-2025-66035 Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other...

  • CVE-2025-66040

    🚨 CVE-2025-66040 Spotipy is a Python library for the Spotify Web API. Prior to version 2.25.2, there is a cross-site scripting (XSS) vulnerability...

  • CVE-2025-12758

    🚨 CVE-2025-12758 Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special...

  • CVE-2025-13536

    🚨 CVE-2025-13536 The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in...

Статистика статей

Статьи
53,082
Просмотры
213,519
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху