Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-35062 | critical | 9.8 | No | Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to ex... | 2026-10-08 |
| CVE-2025-11558 | critical | 9.8 | No | A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php.... | 2026-10-08 |
| CVE-2025-11557 | critical | 9.8 | No | A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add... | 2026-10-08 |
| CVE-2025-11556 | critical | 9.8 | No | A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipul... | 2026-10-08 |
| CVE-2025-11555 | critical | 9.8 | No | A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of... | 2026-10-08 |
| CVE-2025-11553 | critical | 9.8 | No | A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of... | 2026-10-08 |
| CVE-2025-11551 | critical | 9.8 | No | A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Databa... | 2026-10-08 |
| CVE-2025-11549 | critical | 9.8 | No | A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules... | 2026-10-08 |
| CVE-2025-11513 | critical | 9.8 | No | A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php.... | 2026-10-08 |
| CVE-2025-61913 | critical | 9.9 | No | Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadF... | 2026-10-08 |
| CVE-2025-11511 | critical | 9.8 | No | A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executin... | 2026-10-08 |
| CVE-2025-11509 | critical | 9.8 | No | A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. P... | 2026-10-08 |
| CVE-2025-11508 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the file /admin/voters_ad... | 2026-10-08 |
| CVE-2025-11507 | critical | 9.8 | No | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /... | 2026-10-08 |
| CVE-2025-11506 | critical | 9.8 | No | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the f... | 2026-10-08 |
| CVE-2025-11505 | critical | 9.8 | No | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-ap... | 2026-10-08 |
| CVE-2025-11503 | critical | 9.8 | No | A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /a... | 2026-10-08 |
| CVE-2025-11491 | critical | 9.8 | No | A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function CommandManager of the file... | 2026-10-08 |
| CVE-2025-11490 | critical | 9.8 | No | A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of... | 2026-10-08 |
| CVE-2025-11487 | critical | 9.8 | No | A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown functionality of th... | 2026-10-08 |