CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-59402

    🚨 CVE-2025-59402 Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader...

  • CVE-2025-59404

    🚨 CVE-2025-59404 Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of...

  • CVE-2025-56769

    🚨 CVE-2025-56769 An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to...

  • CVE-2025-55187

    🚨 CVE-2025-55187 In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.

  • CVE-2025-57292

    🚨 CVE-2025-57292 Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality. The application...

  • CVE-2025-56463

    🚨 CVE-2025-56463 Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.

  • CVE-2025-58385

    🚨 CVE-2025-58385 In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users (there is...

  • CVE-2025-59362

    🚨 CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

  • CVE-2025-26258

    🚨 CVE-2025-26258 Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

  • CVE-2025-55848

    🚨 CVE-2025-55848 An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as...

  • CVE-2025-45994

    🚨 CVE-2025-45994 An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted...

  • CVE-2025-55847

    🚨 CVE-2025-55847 Wavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerability...

  • CVE-2025-56383

    🚨 CVE-2025-56383 Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this...

  • CVE-2025-58384

    🚨 CVE-2025-58384 In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET...

  • CVE-2025-57692

    🚨 CVE-2025-57692 PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling...

  • CVE-2025-57428

    🚨 CVE-2025-57428 Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access...

  • CVE-2025-56449

    🚨 CVE-2025-56449 A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not...

  • CVE-2025-57516

    🚨 CVE-2025-57516 OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute...

Статистика статей

Статьи
53,084
Просмотры
241,056
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху