Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-11063 | critical | 9.8 | No | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /a... | 2026-10-09 |
| CVE-2025-11062 | critical | 9.8 | No | A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admi... | 2026-10-09 |
| CVE-2025-11061 | critical | 9.8 | No | A vulnerability was found in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/edit_student.p... | 2026-10-09 |
| CVE-2025-11057 | critical | 9.8 | No | A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality... | 2026-10-09 |
| CVE-2025-11056 | critical | 9.8 | No | A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the... | 2026-10-09 |
| CVE-2025-11055 | critical | 9.8 | No | A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updat... | 2026-10-09 |
| CVE-2025-11053 | critical | 9.8 | No | A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing man... | 2026-10-09 |
| CVE-2025-11052 | critical | 9.8 | No | A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Prof... | 2026-10-09 |
| CVE-2025-11046 | critical | 9.8 | No | A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initializatio... | 2026-10-09 |
| CVE-2025-11040 | critical | 9.8 | No | A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file... | 2026-10-09 |
| CVE-2025-11039 | critical | 9.8 | No | A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknow... | 2026-10-09 |
| CVE-2025-11037 | critical | 9.8 | No | A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index... | 2026-10-09 |
| CVE-2025-11036 | critical | 9.8 | No | A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_up... | 2026-10-09 |
| CVE-2025-11035 | critical | 9.8 | No | A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/Manag... | 2026-10-09 |
| CVE-2025-11033 | critical | 9.8 | No | A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown functi... | 2026-10-09 |
| CVE-2025-11032 | critical | 9.8 | No | A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown proces... | 2026-10-09 |
| CVE-2025-61882 | critical | 9.8 | Listed | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versio... | 2026-10-09 |
| CVE-2025-59937 | critical | 9.1 | No | go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address val... | 2026-10-09 |
| CVE-2025-35032 | critical | 9.9 | No | Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends... | 2026-10-09 |
| CVE-2025-48006 | critical | 9.1 | No | Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is... | 2026-10-09 |