Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2025-13585 critical 9.8 No A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. T... 2026-10-08
CVE-2025-13583 critical 9.8 No A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of... 2026-10-08
CVE-2025-13582 critical 9.8 No A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /de... 2026-10-08
CVE-2025-13578 critical 9.8 No A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component... 2026-10-08
CVE-2025-13572 critical 9.8 No A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /delete_adm... 2026-10-08
CVE-2025-13565 critical 9.1 No A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /m... 2026-10-08
CVE-2025-13562 critical 9.8 No A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation o... 2026-10-08
CVE-2025-13561 critical 9.8 No A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.p... 2026-10-08
CVE-2025-62608 critical 9.1 No MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load... 2026-10-08
CVE-2025-13357 critical 9.8 No Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially re... 2026-10-08
CVE-2026-94114 medium 5.9 No Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the... 2026-10-08
CVE-2026-97680 high 8.3 No IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data d... 2026-10-08
CVE-2026-97679 high 8.8 No IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization o... 2026-10-08
CVE-2026-97676 high 8.8 No IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization o... 2026-10-08
CVE-2026-97673 high 8.8 No IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation... 2026-10-08
CVE-2026-79814 medium 6.7 No An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to eleva... 2026-10-08
CVE-2026-79813 medium 6.7 No A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged loc... 2026-10-08
CVE-2026-79811 high 7.2 No A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privile... 2026-10-08
CVE-2026-79810 high 7.2 No Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authent... 2026-10-08
CVE-2026-79808 high 7.8 No A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticate... 2026-10-08