| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-62651 | Restaurant Brands International assistant platform 安全漏洞 | Restaurant Brands International | assistant platform | Medium | 6.5 | 2025-10-17 00:00:00 | Deep Dive |
| CVE-2025-62649 | Restaurant Brands International assistant platform 安全漏洞 | Restaurant Brands International | assistant platform | Medium | 5.8 | 2025-10-17 00:00:00 | Deep Dive |
| CVE-2025-62650 | Restaurant Brands International assistant platform 安全漏洞 | Restaurant Brands International | assistant platform | High | 8.3 | 2025-10-17 00:00:00 | Deep Dive |
| CVE-2025-11568 | Luksmeta: data corruption when handling luks1 partitions with luksmeta | Latchset | luksmeta | Medium | 4.4 | 2025-10-15 19:37:12 | Deep Dive |
| CVE-2025-9640 | Samba: vfs_streams_xattr uninitialized memory write possible | - | - | Medium | 4.3 | 2025-10-15 12:47:30 | Deep Dive |
| CVE-2024-13991 | Huijietong Cloud Video Platform fileDownload Arbitrary File Read | Huijietong | Cloud Video Platform | - | - | 2025-10-15 01:21:41 | Deep Dive |
| CVE-2025-11731 | Libxslt: type confusion in exsltfuncresultcompfunction of libxslt | - | - | Low | 3.1 | 2025-10-14 06:02:36 | Deep Dive |
| CVE-2025-42902 | Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform | SAP_SE | SAP Netweaver AS ABAP and ABAP Platform | Medium | 5.3 | 2025-10-14 00:17:33 | Deep Dive |
| CVE-2025-9976 | OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x | Dassault Systèmes | Station Launcher App in 3DEXPERIENCE platform | Critical | 9.0 | 2025-10-13 07:33:16 | Deep Dive |
| CVE-2025-31996 | Unprotected files are impacting HCL Unica Platform | HCL Software | Unica Platform | Medium | 5.3 | 2025-10-13 03:46:30 | Deep Dive |
| CVE-2025-52615 | HCL Unica Platform is impacted by misconfigured security related HTTP headers | HCL Software | Unica Platform | Low | 3.5 | 2025-10-12 08:18:21 | Deep Dive |
| CVE-2025-52614 | HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability | HCL Software | Unica Platform | Low | 3.5 | 2025-10-12 07:52:47 | Deep Dive |
| CVE-2025-31969 | HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) | HCL Software | Unica Platform | Medium | 4.0 | 2025-10-12 07:37:25 | Deep Dive |
| CVE-2025-11449 | Reflected Cross Site Scripting in ServiceNow AI Platform | ServiceNow | ServiceNow AI Platform | - | - | 2025-10-10 01:15:41 | Deep Dive |
| CVE-2025-11450 | Reflected Cross Site Scripting in ServiceNow AI Platform | ServiceNow | ServiceNow AI Platform | - | - | 2025-10-10 01:09:55 | Deep Dive |
| CVE-2025-11561 | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems | - | - | High | 8.8 | 2025-10-09 13:37:53 | Deep Dive |
| CVE-2025-10353 | Missing Authorization vulnerability in Melis Platform | Melis Technology | Melis Platform | - | - | 2025-10-08 10:47:55 | Deep Dive |
| CVE-2025-10352 | Missing Authorization vulnerability in Melis Platform | Melis Technology | Melis Platform | - | - | 2025-10-08 10:46:41 | Deep Dive |
| CVE-2025-10351 | SQL injection vulnerability in Melis Platform | Melis Technology | Melis Platform | - | - | 2025-10-08 10:45:37 | Deep Dive |
| CVE-2025-52472 | XWiki Platform vulnerable to HQL injection via wiki and space search REST API | xwiki | xwiki-platform | - | - | 2025-10-06 14:53:47 | Deep Dive |