CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-63713

    🚨 CVE-2025-63713 Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web...

  • CVE-2025-63714

    🚨 CVE-2025-63714 Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute...

  • CVE-2025-63716

    🚨 CVE-2025-63716 The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized...

  • CVE-2025-7700

    🚨 CVE-2025-7700 A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause...

  • CVE-2025-63678

    🚨 CVE-2025-63678 An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22...

  • CVE-2025-63666

    🚨 CVE-2025-63666 Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a...

  • CVE-2025-63667

    🚨 CVE-2025-63667 Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to...

  • CVE-2025-63289

    🚨 CVE-2025-63289 Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in...

  • CVE-2025-63353

    🚨 CVE-2025-63353 A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared...

  • CVE-2025-64280

    🚨 CVE-2025-64280 A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.

  • CVE-2025-64281

    🚨 CVE-2025-64281 An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without...

  • CVE-2025-52331

    🚨 CVE-2025-52331 Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose...

  • CVE-2025-59491

    🚨 CVE-2025-59491 Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

  • CVE-2025-63419

    🚨 CVE-2025-63419 Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share files...

  • CVE-2025-60645

    🚨 CVE-2025-60645 A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a...

  • CVE-2025-63811

    🚨 CVE-2025-63811 An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via...

  • CVE-2025-56385

    🚨 CVE-2025-56385 A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp'...

  • CVE-2025-57310

    🚨 CVE-2025-57310 A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to...

Статистика статей

Статьи
53,087
Просмотры
258,367
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху