NVD公開月 2025-09
14 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2025-10492 | Modified | 未確認 | CWE-502 | A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely |
| CVE-2025-11126 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-code |
| CVE-2025-20333 | Analyzed | 掲載 | CWE-120 | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut |
| CVE-2025-20362 | Analyzed | 掲載 | CWE-862 | Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by |
| CVE-2025-20363 | Analyzed | 未確認 | CWE-122 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Ci |
| CVE-2025-26399 | Analyzed | 掲載 | CWE-502 | SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker |
| CVE-2025-34183 | Analyzed | 未確認 | CWE-532 | Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext creden |
| CVE-2025-34184 | Analyzed | 未確認 | CWE-78 | Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax/php/login.php script. Remote attackers can execute arbitrar |
| CVE-2025-34185 | Analyzed | 未確認 | CWE-200, CWE-22 | Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote attackers can retrieve arbitrary fi |
| CVE-2025-34186 | Modified | 未確認 | CWE-287, CWE-78 | Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowin |
| CVE-2025-34187 | Analyzed | 未確認 | CWE-269, CWE-78 | Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are wri |
| CVE-2025-39682 | Analyzed | 掲載 | CWE-754 | In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig |
| CVE-2025-57176 | Deferred | 未確認 | CWE-434 | On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploa |
| CVE-2025-59375 | Modified | 未確認 | CWE-770 | libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. |