NVD公開月 2025-10
16 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2025-11851 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set_alias.cgi. Such manipulation of the argument alias leads to |
| CVE-2025-11852 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing ma |
| CVE-2025-34512 | Modified | 未確認 | CWE-79 | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a reflected cross-site scripting (XSS) vulnerability in index.php that allows an unauthenticated attacker to execute |
| CVE-2025-34513 | Analyzed | 未確認 | CWE-78 | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute a |
| CVE-2025-34517 | Analyzed | 未確認 | CWE-22 | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an absolute path traversal vulnerability in get_file_content.php that allows an attacker to read arbitrary files. Ile |
| CVE-2025-34518 | Analyzed | 未確認 | CWE-22 | Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a relative path traversal vulnerability in get_file_content.php that allows an attacker to read arbitrary files. Ilev |
| CVE-2025-39964 | Analyzed | 掲載 | CWE-362 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is |
| CVE-2025-46817 | Analyzed | 未確認 | CWE-190 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer ov |
| CVE-2025-46818 | Analyzed | 未確認 | CWE-94 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate differen |
| CVE-2025-46819 | Analyzed | 未確認 | CWE-125, CWE-190 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound d |
| CVE-2025-49844 | Modified | 未確認 | CWE-416 | Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garb |
| CVE-2025-53521 | Analyzed | 掲載 | CWE-121 | When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached |
| CVE-2025-59448 | Deferred | 未確認 | CWE-319 | Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic co |
| CVE-2025-59449 | Deferred | 未確認 | CWE-863 | The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to remotely operate affe |
| CVE-2025-59451 | Deferred | 未確認 | CWE-863 | The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes. |
| CVE-2025-59452 | Deferred | 未確認 | CWE-340 | The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begi |