CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-62293

    🚨 CVE-2025-62730 SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify...

  • CVE-2025-62293

    🚨 CVE-2025-62731 SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature is able to...

  • CVE-2025-12120

    🚨 CVE-2025-12120 Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without...

  • CVE-2025-12121

    🚨 CVE-2025-12121 Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution...

  • CVE-2025-62164

    🚨 CVE-2025-62164 vLLM is an inference and serving engine for large language models (LLMs). From versions 0.10.2 to before 0.11.1, a memory...

  • CVE-2025-62372

    🚨 CVE-2025-62372 vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash...

  • CVE-2025-62426

    🚨 CVE-2025-62426 vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, the...

  • CVE-2025-64751

    🚨 CVE-2025-64751 OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar...

  • CVE-2025-13499

    🚨 CVE-2025-13499 Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

  • CVE-2025-9825

    🚨 CVE-2025-9825 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 to 18.2.8, 18.3 before 18.3.4, and 18.4 before...

  • CVE-2025-12746

    🚨 CVE-2025-12746 The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all versions up...

  • CVE-2025-66067

    🚨 CVE-2025-66067 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by...

  • CVE-2025-66087

    🚨 CVE-2025-66087 Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access...

  • CVE-2025-11127

    🚨 CVE-2025-11127 The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify...

  • CVE-2025-12747

    🚨 CVE-2025-12747 The Tainacan plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via uploaded...

  • CVE-2025-30201

    🚨 CVE-2025-30201 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a...

  • CVE-2025-54866

    🚨 CVE-2025-54866 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before...

  • CVE-2025-64169

    🚨 CVE-2025-64169 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 3.7.0 to before...

Статистика статей

Статьи
53,082
Просмотры
213,519
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху