CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-65134

    🚨 CVE-2025-65134 In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in...

  • CVE-2025-65135

    🚨 CVE-2025-65135 In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in...

  • CVE-2025-70023

    🚨 CVE-2025-70023 An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.

  • CVE-2025-67841

    🚨 CVE-2025-67841 Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.

  • CVE-2025-66954

    🚨 CVE-2025-66954 A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to...

  • CVE-2025-70994

    🚨 CVE-2025-70994 Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry...

  • CVE-2025-61872

    🚨 CVE-2025-61872 Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string...

  • CVE-2025-59308

    🚨 CVE-2025-59308 In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a...

  • CVE-2025-67259

    🚨 CVE-2025-67259 A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user can...

  • CVE-2025-69689

    🚨 CVE-2025-69689 The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog...

  • CVE-2025-69428

    🚨 CVE-2025-69428 An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories.

  • CVE-2025-60887

    🚨 CVE-2025-60887 An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead...

  • CVE-2025-50328

    🚨 CVE-2025-50328 A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web...

  • CVE-2025-46115

    🚨 CVE-2025-46115 An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request

  • CVE-2025-56568

    🚨 CVE-2025-56568 Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function)...

  • CVE-2025-63547

    🚨 CVE-2025-63547 An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to...

  • CVE-2025-63548

    🚨 CVE-2025-63548 An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially...

  • CVE-2025-70067

    🚨 CVE-2025-70067 Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху