Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-15458 | critical | 9.8 | No | A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the comp... | 2026-10-07 |
| CVE-2025-15457 | critical | 9.8 | No | A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of... | 2026-10-07 |
| CVE-2025-15449 | critical | 9.1 | No | A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of t... | 2026-10-07 |
| CVE-2025-15448 | critical | 9.8 | No | A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the function Upload of the f... | 2026-10-07 |
| CVE-2025-3654 | critical | 9.8 | No | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to... | 2026-10-07 |
| CVE-2025-3653 | critical | 9.8 | No | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device m... | 2026-10-07 |
| CVE-2025-15115 | critical | 9.8 | No | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows unauthenticated attacke... | 2026-10-07 |
| CVE-2025-64123 | critical | 9.8 | No | Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue a... | 2026-10-07 |
| CVE-2025-64121 | critical | 9.8 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication... | 2026-10-07 |
| CVE-2025-15436 | critical | 9.8 | No | A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp... | 2026-10-07 |
| CVE-2025-15435 | critical | 9.8 | No | A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp.... | 2026-10-07 |
| CVE-2025-15434 | critical | 9.8 | No | A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argu... | 2026-10-07 |
| CVE-2025-15425 | critical | 9.8 | No | A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the co... | 2026-10-07 |
| CVE-2025-15424 | critical | 9.8 | No | A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the c... | 2026-10-07 |
| CVE-2025-15421 | critical | 9.8 | No | A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the co... | 2026-10-07 |
| CVE-2025-15420 | critical | 9.8 | No | A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. Th... | 2026-10-07 |
| CVE-2025-15410 | critical | 9.8 | No | A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /l... | 2026-10-07 |
| CVE-2025-15409 | critical | 9.8 | No | A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the f... | 2026-10-07 |
| CVE-2025-15408 | critical | 9.8 | No | A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Create_product.php. P... | 2026-10-07 |
| CVE-2025-15407 | critical | 9.8 | No | A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category... | 2026-10-07 |