Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2025-59700 low 3.9 No Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi... 2026-11-04
CVE-2025-59699 medium 6.8 No Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi... 2026-11-04
CVE-2025-59698 medium 6.8 No Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a... 2026-11-04
CVE-2025-59697 high 7.2 No Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi... 2026-11-04
CVE-2025-59696 low 3.2 No Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi... 2026-11-04
CVE-2025-59695 critical 9.8 No Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user... 2026-11-04
CVE-2025-59694 medium 6.8 No The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS)... 2026-11-04
CVE-2025-59693 critical 9.8 No The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS)... 2026-11-04
CVE-2025-65858 low 3.5 No A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username'... 2026-11-04
CVE-2025-65622 medium 5.4 No Snipe-IT before 8.3.4 allows stored XSS via the Locations "Country" field, enabling a low-privileged authenticated user to inject JavaScript... 2026-11-04
CVE-2025-65621 medium 5.4 No Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to inject JavaScript that executes in an administrator... 2026-11-04
CVE-2025-65838 high 7.5 No PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. 2026-11-04
CVE-2025-65836 critical 9.1 No PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController. 2026-11-04
CVE-2025-63317 medium 5.4 No Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads. Uploaded SVG files have no sanitization applied, so embedded J... 2026-11-04
CVE-2025-51683 critical 9.8 No A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a cr... 2026-11-04
CVE-2025-51682 critical 9.8 No mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to adminis... 2026-11-04
CVE-2025-65407 medium 6.5 No A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Den... 2026-11-04
CVE-2025-65408 medium 6.5 No A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 all... 2026-11-04
CVE-2025-65406 medium 6.5 No A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause... 2026-11-04
CVE-2025-65405 medium 6.5 No A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a... 2026-11-04