Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-15095 | critical | 9.8 | No | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user... | 2026-10-08 |
| CVE-2016-9841 | critical | 9.8 | No | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | 2026-10-08 |
| CVE-2017-5645 | critical | 9.8 | No | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another applic... | 2026-10-08 |
| CVE-2016-5018 | critical | 9.1 | No | In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application... | 2026-10-08 |
| CVE-2025-8053 | critical | 9.1 | No | Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Securit... | 2026-10-08 |
| CVE-2025-55086 | critical | 9.8 | No | In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked ind... | 2026-10-08 |
| CVE-2025-11943 | critical | 9.8 | No | A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTT... | 2026-10-08 |
| CVE-2025-11942 | critical | 9.8 | No | A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lea... | 2026-10-08 |
| CVE-2025-62650 | critical | 9.9 | No | The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnost... | 2026-10-08 |
| CVE-2025-11405 | critical | 9.8 | No | A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file... | 2026-10-08 |
| CVE-2025-11404 | critical | 9.8 | No | A vulnerability was determined in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown part of the file /pages/save... | 2026-10-08 |
| CVE-2025-11403 | critical | 9.8 | No | A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this issue is some unknown functionality of t... | 2026-10-08 |
| CVE-2025-11402 | critical | 9.8 | No | A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functio... | 2026-10-08 |
| CVE-2025-11401 | critical | 9.8 | No | A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /pages/save_curr.... | 2026-10-08 |
| CVE-2025-11400 | critical | 9.8 | No | A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /del_room... | 2026-10-08 |
| CVE-2025-11399 | critical | 9.8 | No | A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the... | 2026-10-08 |
| CVE-2025-11397 | critical | 9.8 | No | A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of... | 2026-10-08 |
| CVE-2025-11396 | critical | 9.8 | No | A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /product.php. S... | 2026-10-08 |
| CVE-2025-11354 | critical | 9.8 | No | A flaw has been found in code-projects Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/addslideexec.... | 2026-10-08 |
| CVE-2025-59943 | critical | 9.8 | No | phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses durin... | 2026-10-08 |