Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-15168 | critical | 9.8 | No | A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php.... | 2026-10-07 |
| CVE-2025-15167 | critical | 9.8 | No | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.... | 2026-10-07 |
| CVE-2025-15166 | critical | 9.8 | No | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?... | 2026-10-07 |
| CVE-2025-15165 | critical | 9.8 | No | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /upd... | 2026-10-07 |
| CVE-2025-15127 | critical | 9.8 | No | A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this is... | 2026-10-07 |
| CVE-2025-52691 | critical | 10.0 | Listed | Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail s... | 2026-10-07 |
| CVE-2025-15458 | critical | 9.8 | No | A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the comp... | 2026-10-07 |
| CVE-2025-15457 | critical | 9.8 | No | A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of... | 2026-10-07 |
| CVE-2025-15449 | critical | 9.1 | No | A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of t... | 2026-10-07 |
| CVE-2025-15448 | critical | 9.8 | No | A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the function Upload of the f... | 2026-10-07 |
| CVE-2025-3654 | critical | 9.8 | No | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to... | 2026-10-07 |
| CVE-2025-3653 | critical | 9.8 | No | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device m... | 2026-10-07 |
| CVE-2025-15115 | critical | 9.8 | No | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows unauthenticated attacke... | 2026-10-07 |
| CVE-2025-64123 | critical | 9.8 | No | Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue a... | 2026-10-07 |
| CVE-2025-64121 | critical | 9.8 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication... | 2026-10-07 |
| CVE-2025-15436 | critical | 9.8 | No | A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp... | 2026-10-07 |
| CVE-2025-15435 | critical | 9.8 | No | A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp.... | 2026-10-07 |
| CVE-2025-15434 | critical | 9.8 | No | A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argu... | 2026-10-07 |
| CVE-2025-15425 | critical | 9.8 | No | A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the co... | 2026-10-07 |
| CVE-2025-15424 | critical | 9.8 | No | A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the c... | 2026-10-07 |