| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-13032 | Gen Digital Antivirus 安全漏洞 | Avast | (Free/Premiium/Ultimeat) Antivirus | Critical | 9.9 | 2025-11-11 16:16:34 | Deep Dive |
| CVE-2025-5317 | Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac | Bitdefender | Endpoint Security Tools for Mac | 中危 | - | 2025-11-11 08:02:23 | Deep Dive |
| CVE-2025-11521 | Astra Security Suite – Firewall & Malware Scan <= 0.2 - Unauthenticated Arbitrary File Upload | astrasecuritysuite | Astra Security Suite – Firewall & Malware Scan | High | 8.1 | 2025-11-11 03:30:52 | Deep Dive |
| CVE-2025-12916 | Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection | Sangfor | Operation and Maintenance Security Management System | Medium | 6.3 | 2025-11-08 23:32:06 | Deep Dive |
| CVE-2025-59596 | Absolute Secure Access Windows client 安全漏洞 | Absolute Security | Secure Access | - | - | 2025-11-04 22:51:31 | Deep Dive |
| CVE-2025-4952 | Denial-of-service vulnerability in ESET security products for Windows | ESET | ESET NOD32 Antivirus | 中危 | - | 2025-10-31 12:28:15 | Deep Dive |
| CVE-2023-7325 | Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF | Anheng Information (Hangzhou DBAPP Security Information Technology Co., Ltd.) | Mingyu Operations and Maintenance Audit and Risk Control System | - | - | 2025-10-30 21:17:55 | Deep Dive |
| CVE-2025-43027 | Genetec Security Center 安全漏洞 | Genetec Inc. | Genetec Security Center | Critical | 9.8 | 2025-10-30 14:12:28 | Deep Dive |
| CVE-2025-11705 | Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read | scheeeli | Anti-Malware Security and Brute-Force Firewall | Medium | 6.5 | 2025-10-29 04:27:12 | Deep Dive |
| CVE-2025-41390 | TruffleHog 安全漏洞 | Truffle Security Co. | TruffleHog | High | 7.8 | 2025-10-20 14:15:29 | Deep Dive |
| CVE-2025-58051 | Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table | nextcloud | security-advisories | Medium | 6.5 | 2025-10-16 16:48:20 | Deep Dive |
| CVE-2025-36087 | IBM Security Verify Access hard coded credentials | IBM | Security Verify Access | High | 8.1 | 2025-10-13 00:38:14 | Deep Dive |
| CVE-2016-15047 | AVTECH CloudSetup.cgi Authenticated Command Injection | AVTECH SECURITY Corporation | IP Camera, NVR, and DVR Devices | - | - | 2025-10-09 21:10:43 | Deep Dive |
| CVE-2025-59974 | Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability | Juniper Networks | Junos Space Security Director | High | 8.4 | 2025-10-09 15:57:30 | Deep Dive |
| CVE-2025-59968 | Junos Space Security Director: Insufficient authorization for sensitive resources in web interface | Juniper Networks | Junos Space Security Director | High | 8.6 | 2025-10-09 15:48:08 | Deep Dive |
| CVE-2025-11198 | Security Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX Server | Juniper Networks | Security Director Policy Enforcer | High | 7.4 | 2025-10-09 15:39:29 | Deep Dive |
| CVE-2025-36636 | Improper Access Control | Tenable | Security Center | Medium | 4.3 | 2025-10-08 15:19:34 | Deep Dive |
| CVE-2025-36354 | IBM Security Verify Access command execution | IBM | Security Verify Access Appliance | High | 7.3 | 2025-10-06 16:53:43 | Deep Dive |
| CVE-2025-36355 | IBM Security Verify Access code execution | IBM | Security Verify Access Appliance | High | 8.5 | 2025-10-06 16:52:31 | Deep Dive |
| CVE-2025-36356 | IBM Security Verify Access privilege escalation | IBM | Security Verify Access Appliance | Critical | 9.3 | 2025-10-06 16:50:49 | Deep Dive |