Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-65404 | medium | 6.5 | No | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS)... | 2026-11-04 |
| CVE-2025-65403 | medium | 6.5 | No | A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input. | 2026-11-04 |
| CVE-2025-63535 | high | 8.8 | No | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly... | 2026-11-04 |
| CVE-2025-63534 | medium | 5.4 | No | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fa... | 2026-11-04 |
| CVE-2025-63533 | medium | 5.4 | No | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php comp... | 2026-11-04 |
| CVE-2025-63532 | high | 8.8 | No | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to prope... | 2026-11-04 |
| CVE-2025-63095 | medium | 6.5 | No | Improper input validation in the BitstreamWriter::write_bits() function of Tempus Ex hello-video-codec v0.1.0 allows attackers to cause a De... | 2026-11-04 |
| CVE-2025-61229 | high | 7.8 | No | An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary p... | 2026-11-04 |
| CVE-2025-61228 | high | 7.8 | No | An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the software update mechanism | 2026-11-04 |
| CVE-2025-57489 | high | 8.1 | No | Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to t... | 2026-11-04 |
| CVE-2025-64030 | medium | 5.4 | No | Eximbills Enterprise 4.1.5 (Built on 2020-10-30) is vulnerable to authenticated stored cross-site scripting (CWE-79) via the /EximBillWeb/se... | 2026-11-04 |
| CVE-2025-63531 | critical | 9.8 | No | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails t... | 2026-11-04 |
| CVE-2025-63529 | high | 8.8 | No | A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php that allows an attacker to set or predict a user's... | 2026-11-04 |
| CVE-2025-63527 | medium | 5.4 | No | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and hprofile.php comp... | 2026-11-04 |
| CVE-2025-63526 | medium | 5.4 | No | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to... | 2026-11-04 |
| CVE-2025-63525 | high | 8.8 | No | An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges vi... | 2026-11-04 |
| CVE-2025-63523 | medium | 6.5 | No | FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticat... | 2026-11-04 |
| CVE-2025-63522 | medium | 4.6 | No | Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function | 2026-11-04 |
| CVE-2025-63520 | medium | 6.1 | No | Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.1.1 via the id parameter of the User Update function (?r=user%2Fupdate). | 2026-11-04 |
| CVE-2025-65892 | medium | 6.1 | No | Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScri... | 2026-11-04 |