CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-60291

    🚨 CVE-2025-60291 An issue was discovered in eTimeTrackLite Web thru 12.0 (20250704). There is a permission control flaw that allows unauthorized...

  • CVE-2025-61481

    🚨 CVE-2025-61481 An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default...

  • CVE-2025-52268

    🚨 CVE-2025-52268 StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a hardcoded AES key which allows attackers to forge or...

  • CVE-2025-61482

    🚨 CVE-2025-61482 Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers...

  • CVE-2025-60425

    🚨 CVE-2025-60425 Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication...

  • CVE-2025-60791

    🚨 CVE-2025-60791 Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid...

  • CVE-2025-61247

    🚨 CVE-2025-61247 indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php.

  • CVE-2025-27222

    🚨 CVE-2025-27222 TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the...

  • CVE-2025-27223

    🚨 CVE-2025-27223 TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as...

  • CVE-2025-27224

    🚨 CVE-2025-27224 TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application...

  • CVE-2025-27225

    🚨 CVE-2025-27225 TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to...

  • CVE-2025-54967

    🚨 CVE-2025-54967 An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An attacker who...

  • CVE-2025-54968

    🚨 CVE-2025-54968 An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some...

  • CVE-2025-54969

    🚨 CVE-2025-54969 An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An...

  • CVE-2025-54970

    🚨 CVE-2025-54970 An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some...

  • CVE-2025-54965

    🚨 CVE-2025-54965 An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job...

  • CVE-2025-60982

    🚨 CVE-2025-60982 IDOR vulnerability in Educare ERP 1.0 (2025-04-22) allows unauthorized access to sensitive data via manipulated object...

  • CVE-2025-60983

    🚨 CVE-2025-60983 Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints.

Статистика статей

Статьи
53,084
Просмотры
243,522
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху