Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-65025 | critical | 9.8 | No | esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, the esm.sh CDN service is vulnerable to... | 2026-10-18 |
| CVE-2025-13315 | critical | 9.8 | No | Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API aut... | 2026-10-18 |
| CVE-2025-34329 | critical | 9.8 | No | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint... | 2026-10-18 |
| CVE-2025-34328 | critical | 9.8 | No | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin... | 2026-10-18 |
| CVE-2025-13400 | critical | 9.8 | No | A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a m... | 2026-10-18 |
| CVE-2025-13396 | critical | 9.8 | No | A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php.... | 2026-10-18 |
| CVE-2025-64325 | critical | 9.0 | No | Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authen... | 2026-10-18 |
| CVE-2025-41348 | critical | 9.8 | No | SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an d... | 2026-10-18 |
| CVE-2025-13344 | critical | 9.8 | No | A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functional... | 2026-10-18 |
| CVE-2025-41347 | critical | 9.8 | No | Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerability allows an attacke... | 2026-10-18 |
| CVE-2025-41346 | critical | 9.8 | No | Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by kno... | 2026-10-18 |
| CVE-2025-13323 | critical | 9.8 | No | A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorde... | 2026-10-18 |
| CVE-2025-13305 | critical | 9.8 | No | A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown proces... | 2026-10-18 |
| CVE-2025-13248 | critical | 9.8 | No | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown funct... | 2026-10-18 |
| CVE-2025-13242 | critical | 9.8 | No | A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /regi... | 2026-10-18 |
| CVE-2025-13241 | critical | 9.8 | No | A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Execu... | 2026-10-18 |
| CVE-2025-13240 | critical | 9.8 | No | A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Per... | 2026-10-18 |
| CVE-2025-13237 | critical | 9.8 | No | A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignMod... | 2026-10-18 |
| CVE-2025-13236 | critical | 9.8 | No | A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products... | 2026-10-18 |
| CVE-2025-13235 | critical | 9.8 | No | A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.ph... | 2026-10-18 |