Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-13546 | critical | 9.8 | No | A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some un... | 2026-10-18 |
| CVE-2025-13544 | critical | 9.8 | No | A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function... | 2026-10-18 |
| CVE-2025-41115 | critical | 9.8 | No | SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Gra... | 2026-10-18 |
| CVE-2025-64755 | critical | 9.8 | No | Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude... | 2026-10-18 |
| CVE-2025-64655 | critical | 9.8 | No | Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network. | 2026-10-18 |
| CVE-2025-62207 | critical | 9.8 | No | Azure Monitor Elevation of Privilege Vulnerability | 2026-10-18 |
| CVE-2025-40604 | critical | 9.8 | No | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verify... | 2026-10-18 |
| CVE-2025-13451 | critical | 9.8 | No | A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.ph... | 2026-10-18 |
| CVE-2025-13449 | critical | 9.8 | No | A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The m... | 2026-10-18 |
| CVE-2025-13446 | critical | 9.8 | No | A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The man... | 2026-10-18 |
| CVE-2025-13445 | critical | 9.8 | No | A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of... | 2026-10-18 |
| CVE-2025-13442 | critical | 9.8 | No | A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the function system of the... | 2026-10-18 |
| CVE-2025-13424 | critical | 9.8 | No | A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.... | 2026-10-18 |
| CVE-2025-13422 | critical | 9.8 | No | A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file... | 2026-10-18 |
| CVE-2025-13421 | critical | 9.8 | No | A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file... | 2026-10-18 |
| CVE-2025-13420 | critical | 9.8 | No | A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file... | 2026-10-18 |
| CVE-2025-13411 | critical | 9.8 | No | A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this vulnerability is an unknown functionality o... | 2026-10-18 |
| CVE-2025-13410 | critical | 9.8 | No | A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/rece... | 2026-10-18 |
| CVE-2025-65099 | critical | 9.8 | No | Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have bee... | 2026-10-18 |
| CVE-2025-65026 | critical | 9.6 | No | esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, The esm.sh CDN service contains a Templa... | 2026-10-18 |