Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-54304 | critical | 9.8 | No | An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When they are powered on, an X11 display server is start... | 2026-11-04 |
| CVE-2025-54303 | critical | 9.8 | No | The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.... | 2026-11-04 |
| CVE-2025-53963 | critical | 9.8 | No | An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port... | 2026-11-04 |
| CVE-2025-65868 | high | 7.5 | No | XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST reques... | 2026-11-04 |
| CVE-2025-65345 | medium | 6.5 | No | alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to c... | 2026-11-04 |
| CVE-2025-50361 | medium | 5.1 | No | Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe... | 2026-11-04 |
| CVE-2025-63401 | medium | 5.5 | No | Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary c... | 2026-11-04 |
| CVE-2025-50360 | high | 8.4 | No | A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execu... | 2026-11-04 |
| CVE-2025-65843 | high | 7.7 | No | Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The appl... | 2026-11-04 |
| CVE-2025-65842 | medium | 5.1 | No | The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service... | 2026-11-04 |
| CVE-2025-65841 | medium | 6.2 | No | Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file ~/Library/Application Support/Aquarius/aquarius.... | 2026-11-04 |
| CVE-2025-54326 | high | 7.5 | No | An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the... | 2026-11-04 |
| CVE-2025-53965 | medium | 5.3 | No | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480,... | 2026-11-04 |
| CVE-2025-65320 | high | 7.5 | No | Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The applicat... | 2026-11-04 |
| CVE-2025-57202 | medium | 6.1 | No | A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1... | 2026-11-04 |
| CVE-2025-57201 | high | 8.8 | No | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i... | 2026-11-04 |
| CVE-2025-57199 | high | 8.8 | No | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i... | 2026-11-04 |
| CVE-2025-57198 | high | 8.8 | No | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i... | 2026-11-04 |
| CVE-2025-65267 | critical | 9.0 | No | In ERPNext v15.83.2 and Frappe Framework v15.86.0, improper validation of uploaded SVG avatar images allows attackers to embed malicious Jav... | 2026-11-04 |
| CVE-2025-57200 | medium | 6.5 | No | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i... | 2026-11-04 |