CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-70069

    🚨 CVE-2025-70069 An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and...

  • CVE-2025-70070

    🚨 CVE-2025-70070 An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp...

  • CVE-2025-70072

    🚨 CVE-2025-70072 An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp...

  • CVE-2025-70071

    🚨 CVE-2025-70071 An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()

  • CVE-2025-67796

    🚨 CVE-2025-67796 IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to...

  • CVE-2025-66369

    🚨 CVE-2025-66369 An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200...

  • CVE-2025-63705

    🚨 CVE-2025-63705 NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js.

  • CVE-2025-67202

    🚨 CVE-2025-67202 Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss)...

  • CVE-2025-63703

    🚨 CVE-2025-63703 npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().

  • CVE-2025-63704

    🚨 CVE-2025-63704 NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied...

  • CVE-2025-65122

    🚨 CVE-2025-65122 Regex Denial of Service in youtube-regex npm package through version 1.0.5.

  • CVE-2025-67886

    🚨 CVE-2025-67886 Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module...

  • CVE-2025-67887

    🚨 CVE-2025-67887 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module...

  • CVE-2025-67888

    🚨 CVE-2025-67888 An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to...

  • CVE-2025-69599

    🚨 CVE-2025-69599 RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH...

  • CVE-2025-61305

    🚨 CVE-2025-61305 A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services...

  • CVE-2025-61306

    🚨 CVE-2025-61306 A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print...

  • CVE-2025-61307

    🚨 CVE-2025-61307 A reflected cross-site scripted (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху