Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-59695 | critical | 9.8 | No | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user... | 2026-11-04 |
| CVE-2025-59694 | medium | 6.8 | No | The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS)... | 2026-11-04 |
| CVE-2025-59693 | critical | 9.8 | No | The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS)... | 2026-11-04 |
| CVE-2025-65858 | low | 3.5 | No | A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username'... | 2026-11-04 |
| CVE-2025-65622 | medium | 5.4 | No | Snipe-IT before 8.3.4 allows stored XSS via the Locations "Country" field, enabling a low-privileged authenticated user to inject JavaScript... | 2026-11-04 |
| CVE-2025-65621 | medium | 5.4 | No | Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to inject JavaScript that executes in an administrator... | 2026-11-04 |
| CVE-2025-65838 | high | 7.5 | No | PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. | 2026-11-04 |
| CVE-2025-65836 | critical | 9.1 | No | PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController. | 2026-11-04 |
| CVE-2025-63317 | medium | 5.4 | No | Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads. Uploaded SVG files have no sanitization applied, so embedded J... | 2026-11-04 |
| CVE-2025-51683 | critical | 9.8 | No | A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a cr... | 2026-11-04 |
| CVE-2025-51682 | critical | 9.8 | No | mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to adminis... | 2026-11-04 |
| CVE-2025-65407 | medium | 6.5 | No | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Den... | 2026-11-04 |
| CVE-2025-65408 | medium | 6.5 | No | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 all... | 2026-11-04 |
| CVE-2025-65406 | medium | 6.5 | No | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause... | 2026-11-04 |
| CVE-2025-65405 | medium | 6.5 | No | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a... | 2026-11-04 |
| CVE-2025-65404 | medium | 6.5 | No | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS)... | 2026-11-04 |
| CVE-2025-65403 | medium | 6.5 | No | A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. | 2026-11-04 |
| CVE-2025-63535 | high | 8.8 | No | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly... | 2026-11-04 |
| CVE-2025-63534 | medium | 5.4 | No | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fa... | 2026-11-04 |
| CVE-2025-63533 | medium | 5.4 | No | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php comp... | 2026-11-04 |