CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-63891

    🚨 CVE-2025-63891 Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote...

  • CVE-2025-64084

    🚨 CVE-2025-64084 An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier. The vucc_details_ajax function in...

  • CVE-2025-64708

    🚨 CVE-2025-63708 Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote...

  • CVE-2025-63747

    🚨 CVE-2025-63747 QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login...

  • CVE-2025-63748

    🚨 CVE-2025-63748 QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" feature in the "Test Script" module...

  • CVE-2025-63916

    🚨 CVE-2025-63916 MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The application fails...

  • CVE-2025-64046

    🚨 CVE-2025-64046 OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.

  • CVE-2025-63917

    🚨 CVE-2025-63917 PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references...

  • CVE-2025-63918

    🚨 CVE-2025-63918 PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to...

  • CVE-2025-63292

    🚨 CVE-2025-63292 Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x)...

  • CVE-2025-63883

    🚨 CVE-2025-63883 A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 (Bhabishya-123/E-commerce). The site's client-side...

  • CVE-2025-63408

    🚨 CVE-2025-63408 Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain...

  • CVE-2025-63800

    🚨 CVE-2025-63800 The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due...

  • CVE-2025-55796

    🚨 CVE-2025-55796 The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as...

  • CVE-2025-56526

    🚨 CVE-2025-56526 Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.

  • CVE-2025-56527

    🚨 CVE-2025-56527 Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

  • CVE-2025-63258

    🚨 CVE-2025-63258 A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers...

  • CVE-2025-63512

    🚨 CVE-2025-63512 kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor...

Статистика статей

Статьи
53,087
Просмотры
258,367
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху