СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-69723 A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to... n/a / n/a | Средний | 6.1 | 0,23 % | 22.10.2026 | ||
| CVE-2025-60497 A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2. n/a / n/a | Высокий | 5.5 | 0,24 % | PoC | 21.10.2026 | |
| CVE-2025-60496 A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of... n/a / n/a | Средний | 5.5 | 0,4 % | 20.10.2026 | ||
| CVE-2025-60494 A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of... n/a / n/a | Средний | 5.5 | 0,2 % | 20.10.2026 | ||
| CVE-2025-60493 A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project... n/a / n/a | Средний | 5.5 | 0,18 % | 21.10.2026 | ||
| CVE-2025-60492 A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box befo n/a / n/a | Высокий | 5.5 | 0,27 % | PoC | 21.10.2026 | |
| CVE-2025-60491 A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project... n/a / n/a | Средний | 5.5 | 0,19 % | 21.10.2026 | ||
| CVE-2025-60490 A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core... n/a / n/a | Средний | 5.5 | 0,18 % | 21.10.2026 | ||
| CVE-2025-60489 A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of... n/a / n/a | Средний | 5.5 | 0,19 % | 21.10.2026 | ||
| CVE-2025-60487 A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project... n/a / n/a | Средний | 5.5 | 0,18 % | 21.10.2026 | ||
| CVE-2025-60482 A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC... n/a / n/a | Средний | 5.5 | 0,16 % | 19.10.2026 | ||
| CVE-2025-60480 A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC n/a / n/a | Средний | 5.5 | 0,19 % | 19.10.2026 | ||
| CVE-2025-60479 A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC... n/a / n/a | Средний | 5.5 | 0,19 % | 21.10.2026 | ||
| CVE-2025-60478 A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC... n/a / n/a | Средний | 5.5 | 0,18 % | 21.10.2026 | ||
| CVE-2025-60476 A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC... n/a / n/a | Средний | 5.5 | 0,18 % | 21.10.2026 | ||
| CVE-2025-60475 A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project... n/a / n/a | Средний | 5.5 | 0,21 % | 20.10.2026 | ||
| CVE-2025-60469 A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c... n/a / n/a | Средний | 5.5 | 0,19 % | 21.10.2026 | ||
| CVE-2025-62686 A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service n/a / n/a · plugin-alliance / installation_manager | Высокий | 6.2 | 0,19 % | PoC | 03.12.2025 | |
| CVE-2025-60934 Multiple stored cross-site scripting (XSS) vulnerabilities in the index.php component of HR Performa n/a / n/a | Средний | 6.1 | 0,19 % | 21.10.2025 | ||
| CVE-2025-60790 ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Langu n/a / n/a · processwire / processwire | Высокий | 6.5 | 0,43 % | PoC | 21.10.2025 | |
| CVE-2025-60751 GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. n/a / n/a | Высокий | 7.5 | 2,29 % | 21.10.2025 | ||
| CVE-2025-60749 DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup n/a / n/a | Высокий | 7.8 | 0,16 % | 31.10.2025 | ||
| CVE-2025-60570 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i n/a / n/a · dlink / dir-600l_firmware | Высокий | 7.5 | 0,46 % | 24.10.2025 | ||
| CVE-2025-60553 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i n/a / n/a · dlink / dir-600l_firmware | Критический | 9.8 | 0,41 % | 24.10.2025 | ||
| CVE-2025-60552 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i n/a / n/a · dlink / dir-600l_firmware | Высокий | 7.5 | 0,37 % | 24.10.2025 | ||
| CVE-2025-60550 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i n/a / n/a · dlink / dir-600l_firmware | Высокий | 7.5 | 0,37 % | 24.10.2025 | ||
| CVE-2025-60549 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter i n/a / n/a · dlink / dir-600l_firmware | Высокий | 7.5 | 0,37 % | 24.10.2025 | ||
| CVE-2025-60542 SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repos n/a / n/a | Средний | 6.5 | 0,27 % | 29.10.2025 | ||
| CVE-2025-60424 A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 all n/a / n/a · nagios / fusion | Высокий | 7.6 | 0,72 % | 27.10.2025 | ||
| CVE-2025-60355 zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via Free n/a / n/a · zhyd / oneblog | Критический | 9.8 | 0,53 % | PoC | 28.10.2025 |
Ожидаем данные источников·Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.