Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-13234 | critical | 9.8 | No | A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.ph... | 2026-10-18 |
| CVE-2025-13233 | critical | 9.8 | No | A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /ind... | 2026-10-18 |
| CVE-2025-13191 | critical | 9.8 | No | A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This ma... | 2026-10-18 |
| CVE-2025-13189 | critical | 9.8 | No | A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulati... | 2026-10-18 |
| CVE-2025-36251 | critical | 9.8 | No | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary comm... | 2026-10-18 |
| CVE-2025-36250 | critical | 9.8 | No | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to... | 2026-10-18 |
| CVE-2025-36236 | critical | 9.1 | No | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to... | 2026-10-18 |
| CVE-2025-64709 | critical | 9.9 | No | Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot we... | 2026-10-18 |
| CVE-2025-13123 | critical | 9.8 | No | A flaw has been found in AMTT Hotel Broadband Operation System 1.0. The impacted element is an unknown function of the file /user/portal/get... | 2026-10-18 |
| CVE-2025-64741 | critical | 9.8 | No | Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalati... | 2026-10-18 |
| CVE-2025-12762 | critical | 9.8 | No | pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performin... | 2026-10-18 |
| CVE-2025-59367 | critical | 9.8 | No | An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized ac... | 2026-10-18 |
| CVE-2025-13076 | critical | 9.8 | No | A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting... | 2026-10-18 |
| CVE-2025-13075 | critical | 9.8 | No | A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.p... | 2026-10-18 |
| CVE-2025-13060 | critical | 9.8 | No | A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /vi... | 2026-10-18 |
| CVE-2025-13059 | critical | 9.8 | No | A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /mana... | 2026-10-18 |
| CVE-2025-13057 | critical | 9.8 | No | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php... | 2026-10-18 |
| CVE-2025-64446 | critical | 9.8 | Listed | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9... | 2026-10-18 |
| CVE-2025-58034 | high | 7.2 | Listed | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin... | 2026-10-18 |
| CVE-2025-58360 | critical | 9.8 | Listed | GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25... | 2026-10-18 |