Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-61480 | high | 7.5 | No | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of... | 2026-10-28 |
| CVE-2025-61479 | high | 7.5 | No | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of... | 2026-10-28 |
| CVE-2025-71439 | medium | 5.5 | No | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash mo... | 2026-10-28 |
| CVE-2025-13833 | not reported | — | No | A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configu... | 2026-10-28 |
| CVE-2025-69723 | medium | 6.1 | No | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of... | 2026-10-28 |
| CVE-2025-71434 | high | 8.2 | No | Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endp... | 2026-10-28 |
| CVE-2025-55702 | high | 8.7 | No | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread... | 2026-10-28 |
| CVE-2025-31699 | high | 8.9 | No | Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client decl... | 2026-10-28 |
| CVE-2025-60476 | medium | 5.5 | No | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to c... | 2026-10-28 |
| CVE-2025-60469 | medium | 5.5 | No | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows... | 2026-10-28 |
| CVE-2025-60497 | medium | 5.5 | No | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of... | 2026-10-28 |
| CVE-2025-60493 | medium | 5.5 | No | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause... | 2026-10-28 |
| CVE-2025-60492 | medium | 5.5 | No | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denia... | 2026-10-28 |
| CVE-2025-60491 | medium | 5.5 | No | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a... | 2026-10-28 |
| CVE-2025-60490 | medium | 5.5 | No | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allo... | 2026-10-28 |
| CVE-2025-60487 | medium | 5.5 | No | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause... | 2026-10-28 |
| CVE-2025-60478 | medium | 5.5 | No | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to... | 2026-10-28 |
| CVE-2025-71438 | medium | 5.5 | No | An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denia... | 2026-10-28 |
| CVE-2025-60489 | medium | 5.5 | No | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attacke... | 2026-10-28 |
| CVE-2025-60479 | medium | 5.5 | No | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to... | 2026-10-28 |