SEARCHSearch the cs-graph

CVE-#### · MITRE T#### · CWE-#### · ATLAS AML.T#### · D3-XX · compliance article references. Authored by Adam Lundqvist.

30 results for “kev-cve-2025-48703” · 0.81 s · cached

Facets · 1 entity types

30 CVE
CVE-2025-0670CVE

CVE-2025-0670

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft ProKuafor allows Resource Leak Exposure. This issue affects ProKuafor: from s1.02.07 before v1.02.08.

CVSS 4.7EPSS 0.2%
Match for kev-cve-2025-48703
CVE-2026-41207CVE

CVE-2026-41207

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros and has no way to distin…

CVSS 5.3EPSS 0.3%netty
Match for kev-cve-2025-48703
CVE-2026-6207CVE

CVE-2026-6207

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Match for kev-cve-2025-48703
CVE-2025-8590CVE

CVE-2025-8590

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing. This issue affects SKSPro: through …

CVSS 7.5EPSS 0.4%
Match for kev-cve-2025-48703
CVE-2025-68706CVE

CVE-2025-68706

A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-suppli…

CVSS 9.8EPSS 5.0%
Match for kev-cve-2025-48703
CVE-2025-66419CVE

CVE-2025-66419

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent…

CVSS 10.0EPSS 0.3%
Match for kev-cve-2025-48703
CVE-2025-8654CVE

CVE-2025-8654

Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwoo…

CVSS 8.8EPSS 0.8%
Match for kev-cve-2025-48703
CVE-2025-47732CVE

CVE-2025-47732

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

CVSS 9.8EPSS 3.7%
Match for kev-cve-2025-48703
CVE-2025-32573CVE

CVE-2025-32573

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kiotviet KiotViet Sync allows SQL Injection. This issue affects KiotViet Sync: from n/a through 1…

CVSS 8.5EPSS 0.4%
Match for kev-cve-2025-48703
CVE-2025-8587CVE

CVE-2025-8587

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows SQL Injection. This issue aff…

CVSS 8.6EPSS 0.4%akceyazilim
Match for kev-cve-2025-48703
Hybrid search: an exact-match keyword pass (title + MITRE-ID + body-head) fused with Vertex AI semantic similarity (text-embedding-005, cosine vector search over the corpus) via reciprocal-rank fusion — exact IDs stay pinned, related concepts surface by meaning. Curated by Adam Lundqvist, Founder at SQUR.