CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-60991

    🚨 CVE-2025-60991 A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute...

  • CVE-2025-46205

    🚨 CVE-2025-46205 A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a...

  • CVE-2025-56588

    🚨 CVE-2025-56588 Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution (RCE) vulnerability in the User module...

  • CVE-2025-57444

    🚨 CVE-2025-57444 An authenticated cross-site scripting (XSS) vulnerability in the Administrative interface of Radware AlteonOS Web UI Management...

  • CVE-2025-61188

    🚨 CVE-2025-61188 Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to...

  • CVE-2025-57389

    🚨 CVE-2025-57389 A reflected cross-site scripting (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows...

  • CVE-2025-56380

    🚨 CVE-2025-56380 Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the...

  • CVE-2025-56381

    🚨 CVE-2025-56381 ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get...

  • CVE-2025-57443

    🚨 CVE-2025-57443 FrostWire 6.14.0-build-326 for macOS contains permissive entitlements (allow-dyld-environment-variables...

  • CVE-2025-60782

    🚨 CVE-2025-60782 PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site Scripting (XSS) vulnerability in the...

  • CVE-2025-61087

    🚨 CVE-2025-61087 SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under...

  • CVE-2025-61096

    🚨 CVE-2025-61096 PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname parameter.

  • CVE-2025-56154

    🚨 CVE-2025-56154 htmly v3.0.8 is vulnerable to Cross Site Scripting (XSS) in the /author/:name endpoint of the affected application. The name...

  • CVE-2025-56161

    🚨 CVE-2025-56161 YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model...

  • CVE-2025-56162

    🚨 CVE-2025-56162 YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The...

  • CVE-2025-57305

    🚨 CVE-2025-57305 VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp.

  • CVE-2025-60660

    🚨 CVE-2025-60660 Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function.

  • CVE-2025-60662

    🚨 CVE-2025-60662 Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function.

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху