CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-59840

    🚨 CVE-2025-59840 Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In...

  • CVE-2025-64744

    🚨 CVE-2025-64744 OpenObserve is a cloud-native observability platform. In versions up to and including 0.16.1, when creating or renaming an...

  • CVE-2025-64746

    🚨 CVE-2025-64746 Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does not...

  • CVE-2025-13130

    🚨 CVE-2025-13130 A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file...

  • CVE-2025-13131

    🚨 CVE-2025-13131 A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file...

  • CVE-2025-64747

    🚨 CVE-2025-64747 Directus is a real-time API and App dashboard for managing SQL database content. A stored cross-site scripting (XSS)...

  • CVE-2025-64748

    🚨 CVE-2025-64748 Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0...

  • CVE-2025-64749

    🚨 CVE-2025-64749 Directus is a real-time API and App dashboard for managing SQL database content. An observable difference in error messaging was...

  • CVE-2025-11776

    🚨 CVE-2025-11776 Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to discover...

  • CVE-2025-41436

    🚨 CVE-2025-41436 Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users...

  • CVE-2025-55070

    🚨 CVE-2025-55070 Mattermost versions <11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users...

  • CVE-2025-55073

    🚨 CVE-2025-55073 Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11, 10.12.x <= 10.12.0 fail to validate the relationship between the post...

  • CVE-2025-11794

    🚨 CVE-2025-11794 Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11, 10.12.x <= 10.12.0 fail to sanitize user data which allows system...

  • CVE-2025-13168

    🚨 CVE-2025-13168 A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file...

  • CVE-2025-13171

    🚨 CVE-2025-13171 A vulnerability was identified in ZZCMS 2023. This impacts an unknown function of the file /admin/wangkan_list.php. Such...

  • CVE-2025-11865

    🚨 CVE-2025-11865 An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before...

  • CVE-2025-11990

    🚨 CVE-2025-11990 GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could...

  • CVE-2025-2615

    🚨 CVE-2025-2615 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before...

Статистика статей

Статьи
53,082
Просмотры
213,519
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху