CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-54764

    🚨 CVE-2025-54764 Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or...

  • CVE-2025-56450

    🚨 CVE-2025-56450 Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the `lead_id` parameter in the...

  • CVE-2025-57521

    🚨 CVE-2025-57521 Bambu Studio 2.1.1.52 and earlier is affected by a vulnerability that allows arbitrary code execution during application startup...

  • CVE-2025-59438

    🚨 CVE-2025-59438 Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.

  • CVE-2025-60932

    🚨 CVE-2025-60932 Multiple stored cross-site scripting (XSS) vulnerabilities in the Current Goals function of HR Performance Solutions Performance...

  • CVE-2025-60933

    🚨 CVE-2025-60933 Multiple stored cross-site scripting (XSS) vulnerabilities in the Future Goals function of HR Performance Solutions Performance...

  • CVE-2025-60280

    🚨 CVE-2025-60280 Cross-Site Scripting (XSS) vulnerability in Bang Resto v1.0 could allow an attacker to inject malicious JavaScript code into the...

  • CVE-2025-61181

    🚨 CVE-2025-61181 daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.

  • CVE-2025-61194

    🚨 CVE-2025-61194 daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.

  • CVE-2025-61220

    🚨 CVE-2025-61220 The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users...

  • CVE-2025-60500

    🚨 CVE-2025-60500 QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file...

  • CVE-2025-60511

    🚨 CVE-2025-60511 Moodle OpenAI Chat Block plugin 3.0.1 (2025021700) suffers from an Insecure Direct Object Reference (IDOR) vulnerability due to...

  • CVE-2025-60772

    🚨 CVE-2025-60772 Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthenticated...

  • CVE-2025-60427

    🚨 CVE-2025-60427 LibreTime 3.0.0-alpha.10 and possibly earlier is vulnerable to Broken Access Control, where a user with the DJ role can access...

  • CVE-2025-60507

    🚨 CVE-2025-60507 Cross site scripting vulnerability in Moodle GeniAI plugin (local_geniai) 2.3.6. An authenticated user with Teacher role can...

  • CVE-2025-56799

    🚨 CVE-2025-56799 Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a...

  • CVE-2025-56800

    🚨 CVE-2025-56800 Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application implements...

  • CVE-2025-56801

    🚨 CVE-2025-56801 The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB...

Статистика статей

Статьи
53,084
Просмотры
242,330
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху