CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-60638

    🚨 CVE-2025-60638 An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request...

  • CVE-2025-60914

    🚨 CVE-2025-60914 Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive...

  • CVE-2025-60915

    🚨 CVE-2025-60915 An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows...

  • CVE-2025-60916

    🚨 CVE-2025-60916 A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute...

  • CVE-2025-60917

    🚨 CVE-2025-60917 A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute...

  • CVE-2025-63433

    🚨 CVE-2025-63433 Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update...

  • CVE-2025-63434

    🚨 CVE-2025-63434 The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and...

  • CVE-2025-63435

    🚨 CVE-2025-63435 Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function. The server-side endpoint...

  • CVE-2025-63952

    🚨 CVE-2025-63952 A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to...

  • CVE-2025-63953

    🚨 CVE-2025-63953 A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to...

  • CVE-2025-63958

    🚨 CVE-2025-63958 MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint (/MILLENSYS/settings) that is accessible...

  • CVE-2025-56400

    🚨 CVE-2025-56400 Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects...

  • CVE-2025-63914

    🚨 CVE-2025-63914 An issue was discovered in Cinnamon kotaemon 0.11.0. The _may_extract_zip function in the \libs\ktem\ktem\index\file\ui.py file...

  • CVE-2025-64047

    🚨 CVE-2025-64047 OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.

  • CVE-2025-64048

    🚨 CVE-2025-64048 YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article management functionality. The vulnerability...

  • CVE-2025-63498

    🚨 CVE-2025-63498 alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.

  • CVE-2025-54338

    🚨 CVE-2025-54338 An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to...

  • CVE-2025-54341

    🚨 CVE-2025-54341 A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded...

Статистика статей

Статьи
53,087
Просмотры
258,922
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху