CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-6945

    🚨 CVE-2025-6945 GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before...

  • CVE-2025-7000

    🚨 CVE-2025-7000 An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before...

  • CVE-2025-7736

    🚨 CVE-2025-7736 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before...

  • CVE-2025-12983

    🚨 CVE-2025-12983 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5...

  • CVE-2025-13198

    🚨 CVE-2025-13198 A vulnerability has been found in DouPHP up to 1.8 Release 20251022. This impacts an unknown function of the file...

  • CVE-2025-13284

    🚨 CVE-2025-13284 ThinPLUS developed by ThinPLUS has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject...

  • CVE-2025-9501

    🚨 CVE-2025-9501 The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function...

  • CVE-2025-12792

    🚨 CVE-2025-12792 The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat...

  • CVE-2025-12974

    🚨 CVE-2025-12974 The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy...

  • CVE-2025-10158

    🚨 CVE-2025-10158 A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via...

  • CVE-2025-55074

    🚨 CVE-2025-55074 Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which allows...

  • CVE-2025-58121

    🚨 CVE-2025-58121 Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16...

  • CVE-2025-58122

    🚨 CVE-2025-58122 Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification...

  • CVE-2025-64996

    🚨 CVE-2025-64996 In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates...

  • CVE-2025-62406

    🚨 CVE-2025-62406 Piwigo is a full featured open source photo gallery application for the web. In Piwigo 15.6.0, using the password reset function...

  • CVE-2025-64324

    🚨 CVE-2025-64324 KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or...

  • CVE-2025-65013

    🚨 CVE-2025-65013 LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a reflected cross-site...

  • CVE-2025-65014

    🚨 CVE-2025-65014 LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password policy...

Статистика статей

Статьи
53,082
Просмотры
213,519
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху