СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
22| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-0330 Exposure of Sensitive Information in berriai/litellm berriai / berriai/litellm · litellm | Высокий | 7.5 | 0,57 % | 20.03.2025 | ||
| CVE-2026-14351 Exposure of Sensitive Information Through Metadata in GitLab GitLab / GitLab | Высокий | 4.3 | 0,4 % | PoC | 29.07.2026 | |
| CVE-2024-49395 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block · Red Hat / Red Hat Enterprise Linux 10 | Средний | 5.3 | 0,31 % | 12.11.2024 | ||
| CVE-2025-59601 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware Qualcomm, Inc. / Snapdragon | Средний | 6.5 | 0,11 % | 02.06.2026 | ||
| CVE-2026-45544 Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService nextcloud / security-advisories | Средний | 4.3 | 0,22 % | 01.06.2026 | ||
| CVE-2026-49270 Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire) Apache Software Foundation / Apache ActiveMQ Broker · Apache Software Foundation / Apache ActiveMQ | Средний | 5.9 | 0,37 % | 01.06.2026 | ||
| CVE-2025-31959 HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. HCL Software / BigFix Service Management (SM) | Низкий | 3.5 | 0,14 % | 06.05.2026 | ||
| CVE-2024-10324 RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates rometheme / RTMKit | Средний | 4.3 | 0,28 % | 24.01.2025 | ||
| CVE-2024-8910 HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id devitemsllc / HT Mega Addons for Elementor – Elementor Widgets & Template Builder | Средний | 4.3 | 0,31 % | 25.09.2024 | ||
| CVE-2026-29055 Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII TandoorRecipes / recipes | Средний | 5.3 | 0,32 % | 26.03.2026 | ||
| CVE-2026-27661 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected Siemens / SINEC Security Monitor | Средний | 5.3 | 0,28 % | 10.03.2026 | ||
| CVE-2025-13084 Opto 22 groov View Exposure of Sensitive Information Through Metadata Opto 22 / groov View Server · Opto 22 / GRV-EPIC-PR1 Firmware | Средний | 6.1 | 0,28 % | 26.11.2025 | ||
| CVE-2025-30038 Session ID leakage in Zone.Identifier of downloaded files CGM / CGM CLININET | Высокий | 7.3 | 0,17 % | 27.08.2025 | ||
| CVE-2025-8713 PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table n/a / PostgreSQL | Низкий | 3.1 | 0,24 % | 14.08.2025 | ||
| CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware Qualcomm, Inc. / Snapdragon | Высокий | 7.5 | 0,2 % | 06.08.2025 | ||
| CVE-2025-48941 MyBB may disclosure unviewable threads' titles in searches mybb / mybb | Средний | 5.3 | 0,35 % | 02.06.2025 | ||
| CVE-2024-9447 Exposure of Sensitive Information in transformeroptimus/superagi transformeroptimus / transformeroptimus/superagi | Средний | 6.5 | 0,61 % | 20.03.2025 | ||
| CVE-2024-9099 Exposure of Private API Keys in lunary-ai/lunary lunary-ai / lunary-ai/lunary | Высокий | 8.8 | 0,6 % | 20.03.2025 | ||
| CVE-2025-1921 Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remot Google / Chrome | Средний | 6.5 | 0,33 % | 05.03.2025 | ||
| CVE-2025-26527 Non-searchable tags can still be discovered on the tag search page and in the tags block Moodle Project / moodle | Средний | 5.3 | 0,37 % | Патч | 24.02.2025 | |
| CVE-2024-47517 Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access Arista Networks / Arista Edge Threat Management | Средний | 6.8 | 0,41 % | 11.01.2025 | ||
| CVE-2024-53291 Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadat Dell / NativeEdge | Высокий | 7.5 | 0,31 % | 25.12.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.