CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-49398

    🚨 CVE-2025-49398 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy Appointments Easy...

  • CVE-2025-58207

    🚨 CVE-2025-58207 Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows...

  • CVE-2025-60241

    🚨 CVE-2025-60241 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...

  • CVE-2025-60245

    🚨 CVE-2025-60245 Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This...

  • CVE-2025-62039

    🚨 CVE-2025-62039 Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS...

  • CVE-2025-12489

    🚨 CVE-2025-12489 evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers...

  • CVE-2025-12352

    🚨 CVE-2025-12352 The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

  • CVE-2025-10966

    🚨 CVE-2025-10966 curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host...

  • CVE-2025-12859

    🚨 CVE-2025-12859 A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_edit.php...

  • CVE-2025-12860

    🚨 CVE-2025-12860 A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The...

  • CVE-2025-12861

    🚨 CVE-2025-12861 A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file...

  • CVE-2025-12875

    🚨 CVE-2025-12875 A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file...

  • CVE-2025-12919

    🚨 CVE-2025-12919 A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file...

  • CVE-2025-12927

    🚨 CVE-2025-12927 A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file...

  • CVE-2025-12613

    🚨 CVE-2025-12613 Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of...

  • CVE-2025-41001

    🚨 CVE-2025-41001 Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of proper...

  • CVE-2025-12480

    🚨 CVE-2025-12480 Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup...

  • CVE-2025-11307

    🚨 CVE-2025-11307 The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action...

Статистика статей

Статьи
53,082
Просмотры
213,519
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху