CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-56382

    🚨 CVE-2025-56382 A stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An...

  • CVE-2025-57515

    🚨 CVE-2025-57515 A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows remote attackers to inject...

  • CVE-2025-50505

    🚨 CVE-2025-50505 Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-service) by default and...

  • CVE-2025-57564

    🚨 CVE-2025-57564 CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the...

  • CVE-2025-60312

    🚨 CVE-2025-60312 Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XSS) in the "Markdown Input" field...

  • CVE-2025-52021

    🚨 CVE-2025-52021 A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The...

  • CVE-2025-56243

    🚨 CVE-2025-56243 A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0...

  • CVE-2025-60314

    🚨 CVE-2025-60314 Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input...

  • CVE-2025-60833

    🚨 CVE-2025-60833 An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute...

  • CVE-2025-63604

    🚨 CVE-2025-63604 A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution...

  • CVE-2026-5704

    🚨 CVE-2026-5704 A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden...

  • CVE-2026-5745

    🚨 CVE-2026-5745 A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the...

  • CVE-2026-6844

    🚨 CVE-2026-6844 A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS)...

  • CVE-2026-6845

    🚨 CVE-2026-6845 A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a...

  • CVE-2026-6861

    🚨 CVE-2026-6861 A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG...

  • CVE-2026-6862

    🚨 CVE-2026-6862 A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each...

  • CVE-2026-57965

    🚨 CVE-2026-57965 A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially...

  • CVE-2026-57966

    🚨 CVE-2026-57966 A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху