Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-63704 | critical | 9.8 | No | NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query param... | 2026-11-04 |
| CVE-2025-63703 | critical | 9.8 | No | npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js(). | 2026-11-04 |
| CVE-2025-67202 | medium | 6.1 | No | Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via craft... | 2026-11-04 |
| CVE-2025-63705 | high | 8.8 | No | NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js. | 2026-11-04 |
| CVE-2025-66369 | high | 7.5 | No | An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380,... | 2026-11-04 |
| CVE-2025-67796 | high | 8.1 | No | IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other... | 2026-11-04 |
| CVE-2025-70071 | medium | 5.9 | No | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray() | 2026-11-04 |
| CVE-2025-70072 | medium | 6.5 | No | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMat... | 2026-11-04 |
| CVE-2025-70070 | medium | 6.5 | No | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry() | 2026-11-04 |
| CVE-2025-70069 | high | 7.5 | No | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() met... | 2026-11-04 |
| CVE-2025-70067 | critical | 9.8 | No | Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryPr... | 2026-11-04 |
| CVE-2025-69606 | medium | 6.1 | No | Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways... | 2026-11-04 |
| CVE-2025-63548 | high | 7.5 | No | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to be... | 2026-11-04 |
| CVE-2025-63547 | high | 7.5 | No | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU leng... | 2026-11-04 |
| CVE-2025-56568 | high | 7.5 | No | Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Ope... | 2026-11-04 |
| CVE-2025-46115 | high | 7.5 | No | An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request | 2026-11-04 |
| CVE-2025-50328 | high | 7.3 | No | A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protect... | 2026-11-04 |
| CVE-2025-60887 | medium | 5.3 | No | An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking o... | 2026-11-04 |
| CVE-2025-69428 | high | 7.5 | No | An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories. | 2026-11-04 |
| CVE-2025-69689 | high | 8.8 | No | The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-su... | 2026-11-04 |