CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-54334

    🚨 CVE-2025-54334 An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a...

  • CVE-2025-49494

    🚨 CVE-2025-49494 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480...

  • CVE-2025-54327

    🚨 CVE-2025-54327 An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000...

  • CVE-2025-61431

    🚨 CVE-2025-61431 A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity...

  • CVE-2025-27374

    🚨 CVE-2025-27374 An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980...

  • CVE-2025-56230

    🚨 CVE-2025-56230 Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.

  • CVE-2025-61084

    🚨 CVE-2025-61084 MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets (<>) in the From: header of...

  • CVE-2025-57130

    🚨 CVE-2025-57130 An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote...

  • CVE-2025-60753

    🚨 CVE-2025-60753 An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when...

  • CVE-2025-61304

    🚨 CVE-2025-61304 OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.

  • CVE-2025-63601

    🚨 CVE-2025-63601 Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a...

  • CVE-2025-59716

    🚨 CVE-2025-59716 ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/{email}/{token} endpoint...

  • CVE-2025-56231

    🚨 CVE-2025-56231 Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to...

  • CVE-2025-55341

    🚨 CVE-2025-55341 Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexos_nuevo.php asocImgRad.

  • CVE-2025-55342

    🚨 CVE-2025-55342 Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all...

  • CVE-2025-55343

    🚨 CVE-2025-55343 Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txt_depe_codi...

  • CVE-2025-56232

    🚨 CVE-2025-56232 GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy...

  • CVE-2025-60784

    🚨 CVE-2025-60784 A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to manipulate the zhekou parameter in the...

Статистика статей

Статьи
53,087
Просмотры
258,922
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху