CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-56802

    🚨 CVE-2025-56802 The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing...

  • CVE-2025-61255

    🚨 CVE-2025-61255 Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter...

  • CVE-2025-56447

    🚨 CVE-2025-56447 TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure.

  • CVE-2025-60571

    🚨 CVE-2025-60571 D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS.

  • CVE-2025-60572

    🚨 CVE-2025-60572 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork.

  • CVE-2025-61430

    🚨 CVE-2025-61430 Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause...

  • CVE-2025-61115

    🚨 CVE-2025-61115 ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abcfinewineandspirits), developed by ABC...

  • CVE-2025-61117

    🚨 CVE-2025-61117 Senza: Keto & Fasting Android App version 2.10.15 (package name com.gl.senza), developed by Paul Itoi, contains an improper...

  • CVE-2025-61141

    🚨 CVE-2025-61141 sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the...

  • CVE-2025-63423

    🚨 CVE-2025-63423 Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password.

  • CVE-2025-63442

    🚨 CVE-2025-63442 Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (XSS) via the Profile Section. The system...

  • CVE-2025-60503

    🚨 CVE-2025-60503 A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input...

  • CVE-2025-11953

    🚨 CVE-2025-11953 The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The...

  • CVE-2025-63294

    🚨 CVE-2025-63294 WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or...

  • CVE-2025-63416

    🚨 CVE-2025-63416 ** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest...

  • CVE-2025-63589

    🚨 CVE-2025-63589 A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are not...

  • CVE-2025-63783

    🚨 CVE-2025-63783 A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete...

  • CVE-2025-40134

    🚨 CVE-2025-40134 In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is...

Статистика статей

Статьи
53,084
Просмотры
242,330
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху