CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-57483

    🚨 CVE-2025-57483 A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary...

  • CVE-2025-57424

    🚨 CVE-2025-57424 A stored cross-site scripting (XSS) vulnerability exists in the MyCourts v3 application within the LTA number profile field. An...

  • CVE-2025-56764

    🚨 CVE-2025-56764 Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning different...

  • CVE-2025-57266

    🚨 CVE-2025-57266 An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated...

  • CVE-2025-52040

    🚨 CVE-2025-52040 In Frappe ERPNext 15.57.5, the function get_blanket_orders() at erpnext/controllers/queries.py is vulnerable to SQL Injection...

  • CVE-2025-52041

    🚨 CVE-2025-52041 In Frappe ERPNext 15.57.5, the function get_stock_balance_for() at...

  • CVE-2025-52042

    🚨 CVE-2025-52042 In Frappe ERPNext 15.57.5, the function get_rfq_containing_supplier() at...

  • CVE-2025-57275

    🚨 CVE-2025-57275 Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf.

  • CVE-2025-59684

    🚨 CVE-2025-59684 DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking.

  • CVE-2025-59685

    🚨 CVE-2025-59685 Kazaar 1.25.12 allows a JWT with none in the alg field.

  • CVE-2025-59686

    🚨 CVE-2025-59686 Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id.

  • CVE-2025-59687

    🚨 CVE-2025-59687 IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details...

  • CVE-2025-61044

    🚨 CVE-2025-61044 TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in...

  • CVE-2025-61045

    🚨 CVE-2025-61045 TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the...

  • CVE-2025-56514

    🚨 CVE-2025-56514 Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG...

  • CVE-2025-56515

    🚨 CVE-2025-56515 File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to...

  • CVE-2025-28357

    🚨 CVE-2025-28357 A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a...

  • CVE-2025-57393

    🚨 CVE-2025-57393 A stored cross-site scripting (XSS) in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows...

Статистика статей

Статьи
53,084
Просмотры
241,056
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху