CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-61308

    🚨 CVE-2025-61308 A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print...

  • CVE-2025-61310

    🚨 CVE-2025-61310 A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services...

  • CVE-2025-70842

    🚨 CVE-2025-70842 A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw...

  • CVE-2025-61311

    🚨 CVE-2025-61311 A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services...

  • CVE-2025-27850

    🚨 CVE-2025-27850 The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious graphics package...

  • CVE-2025-27852

    🚨 CVE-2025-27852 The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. This...

  • CVE-2025-27853

    🚨 CVE-2025-27853 The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU web site...

  • CVE-2025-69443

    🚨 CVE-2025-69443 Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts...

  • CVE-2025-67031

    🚨 CVE-2025-67031 ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnerability in...

  • CVE-2025-56352

    🚨 CVE-2025-56352 In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during...

  • CVE-2025-51675

    🚨 CVE-2025-51675 An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter (PC) values when SPR changes...

  • CVE-2025-27851

    🚨 CVE-2025-27851 The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among...

  • CVE-2025-61478

    🚨 CVE-2025-61478 An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause...

  • CVE-2025-56565

    🚨 CVE-2025-56565 DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in...

  • CVE-2025-70518

    🚨 CVE-2025-70518 The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input...

  • CVE-2025-70521

    🚨 CVE-2025-70521 The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input...

  • CVE-2026-12109

    🚨 CVE-2026-12109 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with...

  • CVE-2025-10149

    🚨 CVE-2025-10149 The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local...

Статистика статей

Статьи
53,087
Просмотры
259,927
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху