CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-60341

    🚨 CVE-2025-60341 Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set...

  • CVE-2025-60342

    🚨 CVE-2025-60342 Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This...

  • CVE-2025-60343

    🚨 CVE-2025-60343 Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of...

  • CVE-2025-62393

    🚨 CVE-2025-62393 A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow...

  • CVE-2025-62394

    🚨 CVE-2025-62394 Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users...

  • CVE-2025-62395

    🚨 CVE-2025-62395 A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the...

  • CVE-2025-62397

    🚨 CVE-2025-62397 The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding...

  • CVE-2025-62398

    🚨 CVE-2025-62398 A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain...

  • CVE-2025-62399

    🚨 CVE-2025-62399 Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them...

  • CVE-2025-62400

    🚨 CVE-2025-62400 Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups...

  • CVE-2025-62401

    🚨 CVE-2025-62401 An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time...

  • CVE-2025-60852

    🚨 CVE-2025-60852 A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built with...

  • CVE-2025-56007

    🚨 CVE-2025-56007 CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional...

  • CVE-2025-56008

    🚨 CVE-2025-56008 Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the...

  • CVE-2025-56009

    🚨 CVE-2025-56009 Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the...

  • CVE-2025-61132

    🚨 CVE-2025-61132 A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to...

  • CVE-2025-50951

    🚨 CVE-2025-50951 FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.

  • CVE-2025-57240

    🚨 CVE-2025-57240 Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary...

Статистика статей

Статьи
53,084
Просмотры
243,522
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху