CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118642

    🚨 CVE-2026-118642 n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members to use...

  • CVE-2026-118646

    🚨 CVE-2026-118646 n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated...

  • CVE-2025-14260

    🚨 CVE-2025-14260 Due to the improper implementation of access control rules, malicious actors could perform a Server Side Request Forgery (SSRF)...

  • CVE-2025-62839

    🚨 CVE-2025-62839 An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync...

  • CVE-2025-62841

    🚨 CVE-2025-62841 An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync...

  • CVE-2025-31704

    🚨 CVE-2025-31704 A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted...

  • CVE-2025-68391

    🚨 CVE-2025-68391 ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary...

  • CVE-2025-68391

    🚨 CVE-2025-68394 ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input...

  • CVE-2025-68391

    🚨 CVE-2025-68395 ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker...

  • CVE-2025-49602

    🚨 CVE-2025-49602 An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid...

  • CVE-2025-8574

    🚨 CVE-2025-8574 The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7...

  • CVE-2025-11455

    🚨 CVE-2025-11455 The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on...

  • CVE-2025-9462

    🚨 CVE-2025-9462 The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and...

  • CVE-2025-13647

    🚨 CVE-2025-13647 The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain...

  • CVE-2025-62819

    🚨 CVE-2025-62819 Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA...

  • CVE-2025-71450

    🚨 CVE-2025-71450 inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to read...

  • CVE-2025-22436

    🚨 CVE-2025-22436 In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay...

  • CVE-2025-26433

    🚨 CVE-2025-26433 In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху