| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-14761 | Amazon AWS SDK for PHP 安全漏洞 | AWS | AWS SDK for PHP | Medium | 5.3 | 2025-12-17 20:13:55 | Deep Dive |
| CVE-2025-14760 | AWS SDK for C++ 安全漏洞 | AWS | AWS SDK for C++ | Medium | 5.3 | 2025-12-17 20:11:37 | Deep Dive |
| CVE-2025-67505 | Race condition in the Okta Java SDK | okta | okta-sdk-java | High | 8.4 | 2025-12-10 22:19:21 | Deep Dive |
| CVE-2025-66033 | Improper Memory Cleanup in the Okta Java SDK | okta | okta-sdk-java | Medium | 5.3 | 2025-12-10 21:46:13 | Deep Dive |
| CVE-2025-64784 | DNG SDK | Heap-based Buffer Overflow (CWE-122) | Adobe | DNG SDK | High | 7.1 | 2025-12-09 17:41:45 | Deep Dive |
| CVE-2025-64894 | DNG SDK | Integer Overflow or Wraparound (CWE-190) | Adobe | DNG SDK | Medium | 5.5 | 2025-12-09 17:41:44 | Deep Dive |
| CVE-2025-64893 | DNG SDK | Out-of-bounds Read (CWE-125) | Adobe | DNG SDK | High | 7.1 | 2025-12-09 17:41:43 | Deep Dive |
| CVE-2025-64783 | DNG SDK | Integer Overflow or Wraparound (CWE-190) | Adobe | DNG SDK | High | 7.8 | 2025-12-09 17:41:42 | Deep Dive |
| CVE-2025-42928 | Deserialization Vulnerability in SAP jConnect - SDK for ASE | SAP_SE | SAP jConnect - SDK for ASE | Critical | 9.1 | 2025-12-09 02:15:45 | Deep Dive |
| CVE-2025-66622 | matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values | matrix-org | matrix-rust-sdk | - | - | 2025-12-09 02:07:19 | Deep Dive |
| CVE-2025-12986 | Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices | silabs.com | Gecko SDK | - | - | 2025-12-04 21:55:59 | Deep Dive |
| CVE-2025-66416 | DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost | modelcontextprotocol | python-sdk | 高危 | - | 2025-12-02 18:14:28 | Deep Dive |
| CVE-2025-66414 | DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost | modelcontextprotocol | typescript-sdk | - | - | 2025-12-02 18:12:30 | Deep Dive |
| CVE-2025-64655 | Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability | Microsoft | Dynamics OmniChannel SDK Storage Containers | High | 8.8 | 2025-11-20 22:18:36 | Deep Dive |
| CVE-2025-48985 | AI SDK 安全漏洞 | Vercel | AI SDK | Low | 3.7 | 2025-11-07 00:43:28 | Deep Dive |
| CVE-2025-10693 | Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure | silabs.com | Silicon Labs Z-Wave SDK | 高危 | - | 2025-10-31 19:20:16 | Deep Dive |
| CVE-2025-8414 | Zigbee Green Power Host Buffer Overflow Vulnerability | silabs.com | Simplicity SDK | - | - | 2025-10-17 16:02:56 | Deep Dive |
| CVE-2017-20205 | Valve Source SDK Stack-Based Buffer Overflow RCE | Valve Software | Source SDK (source-sdk-2013) | - | - | 2025-10-15 01:23:24 | Deep Dive |
| CVE-2025-62374 | Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs | parse-community | Parse-SDK-JS | Medium | 6.4 | 2025-10-14 20:06:44 | Deep Dive |
| CVE-2025-59430 | Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink | FrontFin | mesh-web-sdk | High | 8.2 | 2025-09-22 18:47:05 | Deep Dive |