CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-61427

    🚨 CVE-2025-61427 A reflected cross-site scripting (XSS) vulnerability in BEO GmbH BEO Atlas Einfuhr Ausfuhr 3.0 allows attackers to execute...

  • CVE-2025-29270

    🚨 CVE-2025-29270 Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers...

  • CVE-2025-63466

    🚨 CVE-2025-63466 Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8...

  • CVE-2025-63467

    🚨 CVE-2025-63467 Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400...

  • CVE-2025-63468

    🚨 CVE-2025-63468 Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8...

  • CVE-2025-63469

    🚨 CVE-2025-63469 Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC...

  • CVE-2025-63460

    🚨 CVE-2025-63460 Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0...

  • CVE-2025-63461

    🚨 CVE-2025-63461 Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode...

  • CVE-2025-63463

    🚨 CVE-2025-63463 Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC...

  • CVE-2025-63459

    🚨 CVE-2025-63459 Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0...

  • CVE-2025-63454

    🚨 CVE-2025-63454 Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the...

  • CVE-2025-63458

    🚨 CVE-2025-63458 Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set...

  • CVE-2025-63562

    🚨 CVE-2025-63562 Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization...

  • CVE-2025-63563

    🚨 CVE-2025-63563 Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a...

  • CVE-2025-29699

    🚨 CVE-2025-29699 NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.

  • CVE-2025-60892

    🚨 CVE-2025-60892 An issue in Raspberry Pi Imager version 1.9.6 for Windows, affecting its OS customization feature. The imager's 'public-key...

  • CVE-2025-63443

    🚨 CVE-2025-63443 School Management System PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /login.php via the password parameter.

  • CVE-2025-60785

    🚨 CVE-2025-60785 A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to...

Статистика статей

Статьи
53,087
Просмотры
258,922
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху