Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-65815 | medium | 6.5 | No | A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a dir... | 2026-11-04 |
| CVE-2025-65814 | medium | 6.5 | No | A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a direc... | 2026-11-04 |
| CVE-2025-65792 | critical | 9.1 | No | DataGear v5.5.0 is vulnerable to Arbitrary File Deletion. | 2026-11-04 |
| CVE-2025-52493 | medium | 6.5 | No | PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets ap... | 2026-11-04 |
| CVE-2025-65807 | high | 8.4 | No | An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command. | 2026-11-04 |
| CVE-2025-65803 | medium | 6.5 | No | An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (... | 2026-11-04 |
| CVE-2025-65513 | high | 7.5 | No | fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerability, which allows attackers to bypass private IP v... | 2026-11-04 |
| CVE-2025-65741 | critical | 9.8 | No | Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the executi... | 2026-11-04 |
| CVE-2025-65882 | critical | 9.8 | No | An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function crea... | 2026-11-04 |
| CVE-2025-65573 | high | 8.8 | No | Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via... | 2026-11-04 |
| CVE-2025-65572 | medium | 6.1 | No | Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to execute arbitrary code via the (1) c... | 2026-11-04 |
| CVE-2025-65300 | medium | 5.4 | No | A stored Cross-Site Scripting (XSS) vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 (2025-10-28) in the Account Set... | 2026-11-04 |
| CVE-2025-65594 | high | 8.1 | No | OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform... | 2026-11-04 |
| CVE-2025-64086 | high | 7.5 | No | A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to caus... | 2026-11-04 |
| CVE-2025-64085 | high | 7.5 | No | A NULL pointer dereference vulnerability in the importDataObject() function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a De... | 2026-11-04 |
| CVE-2025-61258 | high | 7.5 | No | Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the bo... | 2026-11-04 |
| CVE-2025-61078 | medium | 6.1 | No | Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML... | 2026-11-04 |
| CVE-2025-65730 | high | 8.8 | No | Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used... | 2026-11-04 |
| CVE-2025-64056 | medium | 4.3 | No | File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the fi... | 2026-11-04 |
| CVE-2025-64054 | critical | 9.6 | No | A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potenti... | 2026-11-04 |