Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-15206 | critical | 9.8 | No | A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executi... | 2026-10-07 |
| CVE-2025-15198 | critical | 9.8 | No | A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /... | 2026-10-07 |
| CVE-2025-15196 | critical | 9.8 | No | A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipula... | 2026-10-07 |
| CVE-2025-69201 | critical | 9.8 | No | Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected... | 2026-10-07 |
| CVE-2025-15195 | critical | 9.8 | No | A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file... | 2026-10-07 |
| CVE-2025-57460 | critical | 9.8 | No | File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell. | 2026-10-07 |
| CVE-2025-15186 | critical | 9.8 | No | A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of... | 2026-10-07 |
| CVE-2025-15185 | critical | 9.8 | No | A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the... | 2026-10-07 |
| CVE-2025-15184 | critical | 9.8 | No | A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugees... | 2026-10-07 |
| CVE-2025-15183 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file... | 2026-10-07 |
| CVE-2025-15182 | critical | 9.8 | No | A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/serve... | 2026-10-07 |
| CVE-2025-15181 | critical | 9.8 | No | A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the... | 2026-10-07 |
| CVE-2025-15069 | critical | 9.8 | No | Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1 | 2026-10-07 |
| CVE-2025-15068 | critical | 9.8 | No | Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.T... | 2026-10-07 |
| CVE-2025-15168 | critical | 9.8 | No | A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php.... | 2026-10-07 |
| CVE-2025-15167 | critical | 9.8 | No | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.... | 2026-10-07 |
| CVE-2025-15166 | critical | 9.8 | No | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?... | 2026-10-07 |
| CVE-2025-15165 | critical | 9.8 | No | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /upd... | 2026-10-07 |
| CVE-2025-15127 | critical | 9.8 | No | A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this is... | 2026-10-07 |
| CVE-2025-52691 | critical | 10.0 | Listed | Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail s... | 2026-10-07 |