CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-48884

    🚨 CVE-2025-48884 Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette's...

  • CVE-2025-55155

    🚨 CVE-2025-55155 Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to...

  • CVE-2025-62507

    🚨 CVE-2025-62507 Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL...

  • CVE-2025-62520

    🚨 CVE-2025-62520 Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level...

  • CVE-2025-64106

    🚨 CVE-2025-64106 Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP...

  • CVE-2025-64107

    🚨 CVE-2025-64107 Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to...

  • CVE-2025-64109

    🚨 CVE-2025-64109 Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an...

  • CVE-2025-64110

    🚨 CVE-2025-64110 Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read...

  • CVE-2025-10567

    🚨 CVE-2025-10567 The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its...

  • CVE-2025-10873

    🚨 CVE-2025-10873 The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to...

  • CVE-2025-11072

    🚨 CVE-2025-11072 The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded...

  • CVE-2025-6027

    🚨 CVE-2025-6027 The Ace User Management WordPress plugin through 2.0.3 does not properly validate that a password reset token is associated with...

  • CVE-2025-12745

    🚨 CVE-2025-12745 A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function...

  • CVE-2025-62161

    🚨 CVE-2025-62161 Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is...

  • CVE-2025-62596

    🚨 CVE-2025-62596 Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently...

  • CVE-2025-64163

    🚨 CVE-2025-64163 DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to...

  • CVE-2025-64164

    🚨 CVE-2025-64164 Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when...

  • CVE-2025-61994

    🚨 CVE-2025-61994 Cross-site scripting vulnerability exists in GROWI prior to v7.2.10. If a malicious user creates a page containing crafted...

Статистика статей

Статьи
53,082
Просмотры
209,808
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху