Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-11036 | critical | 9.8 | No | A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_up... | 2026-10-09 |
| CVE-2025-11035 | critical | 9.8 | No | A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/Manag... | 2026-10-09 |
| CVE-2025-11033 | critical | 9.8 | No | A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown functi... | 2026-10-09 |
| CVE-2025-11032 | critical | 9.8 | No | A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown proces... | 2026-10-09 |
| CVE-2025-61882 | critical | 9.8 | Listed | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versio... | 2026-10-09 |
| CVE-2025-59937 | critical | 9.1 | No | go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address val... | 2026-10-09 |
| CVE-2025-35032 | critical | 9.9 | No | Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends... | 2026-10-09 |
| CVE-2025-48006 | critical | 9.1 | No | Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is... | 2026-10-09 |
| CVE-2025-11140 | critical | 9.8 | No | A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm of the component com... | 2026-10-09 |
| CVE-2025-11139 | critical | 9.8 | No | A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.s... | 2026-10-09 |
| CVE-2025-11118 | critical | 9.8 | No | A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.p... | 2026-10-09 |
| CVE-2025-11116 | critical | 9.8 | No | A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipul... | 2026-10-09 |
| CVE-2025-11115 | critical | 9.8 | No | A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the fi... | 2026-10-09 |
| CVE-2025-11111 | critical | 9.8 | No | A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admi... | 2026-10-09 |
| CVE-2026-90461 | medium | 6.3 | No | OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) B... | 2026-10-09 |
| CVE-2026-107510 | critical | 9.1 | No | An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation. | 2026-10-09 |
| CVE-2026-89322 | high | 7.2 | No | Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names. This may allo... | 2026-10-09 |
| CVE-2026-106177 | medium | 6.4 | No | A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code exec... | 2026-10-09 |
| CVE-2026-105331 | not reported | — | No | Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the ag... | 2026-10-09 |
| CVE-2026-105816 | high | 8.0 | No | Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin di... | 2026-10-09 |