Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-67111 | high | 7.5 | No | An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to cause a Denial of Service (DoS) vi... | 2026-11-04 |
| CVE-2025-67109 | critical | 10.0 | No | Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execut... | 2026-11-04 |
| CVE-2025-65865 | high | 7.5 | No | An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. | 2026-11-04 |
| CVE-2025-66845 | medium | 6.1 | No | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id qu... | 2026-11-04 |
| CVE-2025-67436 | medium | 6.5 | No | Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP... | 2026-11-04 |
| CVE-2025-65857 | high | 7.5 | No | An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTS... | 2026-11-04 |
| CVE-2025-65856 | critical | 9.8 | No | Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenti... | 2026-11-04 |
| CVE-2025-66736 | high | 7.1 | No | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permiss... | 2026-11-04 |
| CVE-2025-65817 | high | 8.8 | No | LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh. | 2026-11-04 |
| CVE-2025-67418 | critical | 9.8 | No | ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrat... | 2026-11-04 |
| CVE-2025-67291 | medium | 6.1 | No | A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts... | 2026-11-04 |
| CVE-2025-67290 | medium | 6.1 | No | A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web... | 2026-11-04 |
| CVE-2025-65837 | medium | 5.4 | No | PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module. | 2026-11-04 |
| CVE-2025-65790 | medium | 6.1 | No | A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. F... | 2026-11-04 |
| CVE-2025-67288 | critical | 10.0 | No | An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code by uploading a crafted PDF file. NO... | 2026-11-04 |
| CVE-2025-63664 | high | 7.5 | No | Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers... | 2026-11-04 |
| CVE-2025-63662 | high | 7.5 | No | Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive i... | 2026-11-04 |
| CVE-2025-26787 | medium | 4.7 | No | An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2. The Admin CLI command used to co... | 2026-11-04 |
| CVE-2025-67289 | critical | 9.6 | No | An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via... | 2026-11-04 |
| CVE-2025-65270 | medium | 6.1 | No | Reflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute... | 2026-11-04 |