Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-71437 | medium | 6.5 | No | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafte... | 2026-10-28 |
| CVE-2025-60496 | medium | 5.5 | No | A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attacke... | 2026-10-28 |
| CVE-2025-60494 | medium | 5.5 | No | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows atta... | 2026-10-28 |
| CVE-2025-60475 | medium | 5.5 | No | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a... | 2026-10-28 |
| CVE-2025-71436 | high | 7.1 | No | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_lit... | 2026-10-28 |
| CVE-2025-36252 | medium | 6.3 | No | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could... | 2026-10-28 |
| CVE-2025-36069 | medium | 5.5 | No | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to im... | 2026-10-28 |
| CVE-2025-36061 | medium | 6.5 | No | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated... | 2026-10-28 |
| CVE-2025-60480 | medium | 5.5 | No | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c354... | 2026-10-28 |
| CVE-2025-55667 | medium | 5.5 | No | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attacke... | 2026-10-28 |
| CVE-2025-55654 | medium | 5.5 | No | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial... | 2026-10-28 |
| CVE-2025-52290 | high | 7.5 | No | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cau... | 2026-10-28 |
| CVE-2025-66969 | high | 7.5 | No | Integer overflow in OpenModSim ( | 2026-10-28 |
| CVE-2025-55653 | medium | 5.5 | No | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Processing a crafted M... | 2026-10-28 |
| CVE-2025-55640 | medium | 5.5 | No | A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Servic... | 2026-10-28 |
| CVE-2025-56563 | critical | 9.8 | No | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controll... | 2026-10-28 |
| CVE-2025-66974 | high | 7.5 | No | An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial... | 2026-10-28 |
| CVE-2026-93516 | medium | 5.5 | No | A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XW... | 2026-10-28 |
| CVE-2026-93515 | not reported | — | No | A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malic... | 2026-10-28 |
| CVE-2026-118040 | high | 7.5 | No | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and impr... | 2026-10-28 |