Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-12305 | critical | 9.8 | No | A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/contro... | 2026-10-08 |
| CVE-2025-12301 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /ed... | 2026-10-08 |
| CVE-2025-12296 | critical | 9.8 | No | A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Fir... | 2026-10-08 |
| CVE-2025-12294 | critical | 9.8 | No | A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php.... | 2026-10-08 |
| CVE-2025-12293 | critical | 9.8 | No | A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. S... | 2026-10-08 |
| CVE-2025-12292 | critical | 9.8 | No | A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This ma... | 2026-10-08 |
| CVE-2025-12273 | critical | 9.8 | No | A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFi... | 2026-10-08 |
| CVE-2025-12272 | critical | 9.8 | No | A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performi... | 2026-10-08 |
| CVE-2025-12271 | critical | 9.8 | No | A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipu... | 2026-10-08 |
| CVE-2025-59461 | critical | 9.8 | No | A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services. | 2026-10-08 |
| CVE-2025-12265 | critical | 9.8 | No | A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer.... | 2026-10-08 |
| CVE-2025-12257 | critical | 9.8 | No | A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of... | 2026-10-08 |
| CVE-2025-12253 | critical | 9.8 | No | A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of t... | 2026-10-08 |
| CVE-2025-12240 | critical | 9.8 | No | A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-b... | 2026-10-08 |
| CVE-2025-12239 | critical | 9.8 | No | A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-b... | 2026-10-08 |
| CVE-2025-12237 | critical | 9.8 | No | A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.p... | 2026-10-08 |
| CVE-2025-12232 | critical | 9.8 | No | A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/... | 2026-10-08 |
| CVE-2025-12226 | critical | 9.8 | No | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_... | 2026-10-08 |
| CVE-2025-12215 | critical | 9.8 | No | A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing... | 2026-10-08 |
| CVE-2025-12211 | critical | 9.8 | No | A security flaw has been discovered in Tenda O3 1.0.0.10(2478). Affected by this issue is the function SetValue/GetValue of the file /goform... | 2026-10-08 |