CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-12065

    🚨 CVE-2025-12065 The WP Carticon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carticon_js_script' parameter in all...

  • CVE-2025-47776

    🚨 CVE-2025-47776 Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===)...

  • CVE-2025-48076

    🚨 CVE-2025-48076 Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit...

  • CVE-2025-11202

    🚨 CVE-2025-11202 win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote...

  • CVE-2025-11203

    🚨 CVE-2025-11203 LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose...

  • CVE-2025-11466

    🚨 CVE-2025-11466 Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to...

  • CVE-2025-39663

    🚨 CVE-2025-39663 Cross-Site Scripting (XSS) vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious...

  • CVE-2025-12060

    🚨 CVE-2025-12060 The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal...

  • CVE-2025-62726

    🚨 CVE-2025-62726 n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git...

  • CVE-2025-62795

    🚨 CVE-2025-62795 JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and...

  • CVE-2025-58147

    🚨 CVE-2025-58147 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]...

  • CVE-2025-58148

    🚨 CVE-2025-58148 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]...

  • CVE-2025-58149

    🚨 CVE-2025-58149 When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device...

  • CVE-2025-64168

    🚨 CVE-2025-64168 Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when...

  • CVE-2025-62618

    🚨 CVE-2025-62618 ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when...

  • CVE-2025-12642

    🚨 CVE-2025-12642 lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to...

  • CVE-2025-46556

    🚨 CVE-2025-46556 Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt...

  • CVE-2025-12070

    🚨 CVE-2025-12070 The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is...

Статистика статей

Статьи
53,082
Просмотры
209,808
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху