Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-10833 | critical | 9.8 | No | A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /log... | 2026-10-11 |
| CVE-2025-10832 | critical | 9.8 | No | A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /a... | 2026-10-11 |
| CVE-2025-10831 | critical | 9.8 | No | A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_... | 2026-10-11 |
| CVE-2025-10830 | critical | 9.8 | No | A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/in... | 2026-10-11 |
| CVE-2025-10829 | critical | 9.8 | No | A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /page... | 2026-10-11 |
| CVE-2025-10817 | critical | 9.8 | No | A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admi... | 2026-10-11 |
| CVE-2025-10816 | critical | 9.8 | No | A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/ToolBar/GetWordFileName... | 2026-10-11 |
| CVE-2025-10813 | critical | 9.8 | No | A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_rep... | 2026-10-11 |
| CVE-2025-10812 | critical | 9.8 | No | A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/m... | 2026-10-11 |
| CVE-2025-26399 | critical | 9.8 | Listed | SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability tha... | 2026-10-11 |
| CVE-2026-96653 | medium | 6.5 | No | The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all v... | 2026-10-11 |
| CVE-2026-85479 | medium | 5.3 | No | The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated... | 2026-10-11 |
| CVE-2026-39453 | high | 8.3 | No | Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create D... | 2026-10-11 |
| CVE-2026-33367 | high | 8.1 | No | SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and i... | 2026-10-11 |
| CVE-2026-33272 | medium | 4.9 | No | A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default admini... | 2026-10-11 |
| CVE-2026-29797 | high | 7.1 | No | No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additiona... | 2026-10-11 |
| CVE-2026-28745 | high | 7.5 | No | Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default crede... | 2026-10-11 |
| CVE-2026-15340 | critical | 9.8 | No | lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow. | 2026-10-11 |
| CVE-2026-105278 | critical | 9.8 | No | The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with netwo... | 2026-10-11 |
| CVE-2026-105281 | high | 7.5 | No | The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated n... | 2026-10-11 |