CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2024-36354

    🚨 CVE-2024-36354 Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0...

  • CVE-2024-48341

    🚨 CVE-2024-48341 dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...

  • CVE-2024-45432

    🚨 CVE-2024-45432 OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth...

  • CVE-2024-45433

    🚨 CVE-2024-45433 OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK...

  • CVE-2024-45434

    🚨 CVE-2024-45434 OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack...

  • CVE-2024-25011

    🚨 CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be...

  • CVE-2024-4598

    🚨 CVE-2024-4598 An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator...

  • CVE-2024-6429

    🚨 CVE-2024-6429 A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain...

  • CVE-2024-58241

    🚨 CVE-2024-58241 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Disable works on hci_unregister_dev...

  • CVE-2024-57494

    🚨 CVE-2024-57494 Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate...

  • CVE-2024-56804

    🚨 CVE-2024-56804 An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can...

  • CVE-2024-26008

    🚨 CVE-2024-26008 An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before...

  • CVE-2024-56143

    🚨 CVE-2024-56143 Strapi is an open-source headless content management system. In versions from 5.0.0 to before 5.5.2, the lookup operator provided...

  • CVE-2024-55568

    🚨 CVE-2024-55568 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200...

  • CVE-2024-45162

    🚨 CVE-2024-45162 A stack-based buffer overflow issue was discovered in the phddns client in Blu-Castle BCUM221E 1.0.0P220507 via the password field.

  • CVE-2024-51317

    🚨 CVE-2024-51317 An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

  • CVE-2024-12125

    🚨 CVE-2024-12125 A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible...

  • CVE-2024-44630

    🚨 CVE-2024-44630 Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include...

Статистика статей

Статьи
53,082
Просмотры
213,519
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху