NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2013-10031 Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks 2025-12-09 7.5 NETWORK HIGH NVD
CVE-2025-66469 NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to Reflected XSS through its ui.add_css, ui.add_scss, and ui.add_sass ... 2025-12-09 6.1 NETWORK MEDIUM NVD
CVE-2025-66204 WBCE CMS is a content management system. Version 1.6.4 contains a brute-force protection bypass where an attacker can indefinitely reset the counter b... 2025-12-09 8.1 NETWORK HIGH NVD
CVE-2025-66202 Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attacker to bypass path-based a... 2025-12-09 6.5 NETWORK MEDIUM NVD
CVE-2025-65964 n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the proje... 2025-12-09 9.4 NETWORK CRITICAL NVD
CVE-2025-65962 Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99... 2025-12-09 4.6 NETWORK MEDIUM NVD
CVE-2025-64760 Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99... 2025-12-08 4.6 NETWORK MEDIUM NVD
CVE-2025-64499 Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.176... 2025-12-08 4.6 NETWORK MEDIUM NVD
CVE-2025-64498 Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 an... 2025-12-08 4.6 NETWORK MEDIUM NVD
CVE-2025-64497 Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Editio... 2025-12-08 6.5 NETWORK MEDIUM NVD
CVE-2025-36140 IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of... 2025-12-08 6.5 NETWORK MEDIUM NVD
CVE-2025-64650 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files. 2025-12-08 6.5 NETWORK MEDIUM NVD
CVE-2025-62408 c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and proc... 2025-12-08 5.9 NETWORK MEDIUM NVD
CVE-2025-36102 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing u... 2025-12-08 2.7 NETWORK LOW NVD
CVE-2025-36017 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental var... 2025-12-08 6.5 NETWORK MEDIUM NVD