CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-61385

    🚨 CVE-2025-61385 SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially...

  • CVE-2025-61099

    🚨 CVE-2025-61099 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function...

  • CVE-2025-61100

    🚨 CVE-2025-61100 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump...

  • CVE-2025-61101

    🚨 CVE-2025-61101 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the...

  • CVE-2025-61105

    🚨 CVE-2025-61105 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function...

  • CVE-2025-60354

    🚨 CVE-2025-60354 Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot.

  • CVE-2025-60800

    🚨 CVE-2025-60800 Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access...

  • CVE-2025-60805

    🚨 CVE-2025-60805 An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive...

  • CVE-2025-61080

    🚨 CVE-2025-61080 A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment...

  • CVE-2025-61235

    🚨 CVE-2025-61235 An issue was discovered in Dataphone A920 v2025.07.161103. A custom packet based on public documentation can be crafted, where...

  • CVE-2025-61161

    🚨 CVE-2025-61161 DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an...

  • CVE-2025-61429

    🚨 CVE-2025-61429 An issue in NCR Atleos Terminal Manager (ConfigApp) v3.4.0 allows attackers to escalate privileges via a crafted request.

  • CVE-2025-63622

    🚨 CVE-2025-63622 A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file...

  • CVE-2025-60898

    🚨 CVE-2025-60898 An unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a...

  • CVE-2025-60595

    🚨 CVE-2025-60595 SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution.

  • CVE-2025-61234

    🚨 CVE-2025-61234 Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without...

  • CVE-2025-57227

    🚨 CVE-2025-57227 An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a...

  • CVE-2025-61876

    🚨 CVE-2025-61876 Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an...

Статистика статей

Статьи
53,084
Просмотры
243,522
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху