CVE-2025 list

CVE-2025 records published in October 2025

Page two of four: records 1,001 to 2,000 of the 3,687 published in October 2025, newest first. The first page carries the figures for October 2025.

CVE-2025 records published in October 2025, newest first: records 1,001 to 2,000 of 3,687
CVE Summary CVSS EPSS Published Signals
CVE-2025-60852Instant Developer Foundation versions CSV injection6.5CISA ADP v3.10.4%2025-10-23Exploit code
CVE-2025-60837MCMS reflected cross-site scripting (XSS)6.1CISA ADP v3.10.2%2025-10-23
CVE-2025-60023AutomationDirect Productivity Suite relative path traversal6.3CNA v4.00.5%2025-10-23Fix
CVE-2025-59776AutomationDirect Productivity Suite relative path traversal6.3CNA v4.00.5%2025-10-23Fix
CVE-2025-59503Microsoft Azure Compute Resource Provider elevation of privilege10.0CNA v3.10.8%2025-10-23Fix
CVE-2025-59500Microsoft Azure Notification Service elevation of privilege7.7CNA v3.10.6%2025-10-23Fix
CVE-2025-59273Microsoft Azure Event Grid System elevation of privilege7.3CNA v3.10.4%2025-10-23Fix
CVE-2025-59048OpenBao AWS Plugin vulnerable to Cross-Account IAM Role Impersonation in AWS Auth method8.1CNA v3.10.3%2025-10-23Fix
CVE-2025-58456AutomationDirect Productivity Suite relative path traversal8.2CNA v4.00.6%2025-10-23Fix
CVE-2025-58429AutomationDirect Productivity Suite relative path traversal8.3CNA v4.00.6%2025-10-23Fix
CVE-2025-58428Command injection in Veeder-Root TLS4B Automatic Tank Gauge System9.4CNA v4.01.4%2025-10-23Fix
CVE-2025-58078AutomationDirect Productivity Suite relative path traversal8.3CNA v4.00.6%2025-10-23Fix
CVE-2025-57848Red Hat RHEL-8-CNV-4.12 container-native-virtualization: Privilege escalation6.4CNA v3.10.2%2025-10-23Fix
CVE-2025-5724017gz International Student Service System registration step cross-site scripting6.1CISA ADP v3.10.2%2025-10-23
CVE-2025-56009Keeneticos cross-site request forgery5.3CISA ADP v3.10.2%2025-10-23Fix
CVE-2025-56008Keeneticos cross-site scripting6.1CISA ADP v3.10.2%2025-10-23Fix
CVE-2025-56007Keeneticos CRLF injection6.5CISA ADP v3.10.3%2025-10-23Fix
CVE-2025-55067Integer overflow or wraparound in Veeder-Root TLS4B Automatic Tank Gauge System7.1CNA v4.00.5%2025-10-23
CVE-2025-54966Baesystems Socet Gxp information disclosure4.3CISA ADP v3.10.2%2025-10-23Fix
CVE-2025-54964Baesystems Socet Gxp command injection8.4CISA ADP v3.10.3%2025-10-23
CVE-2025-54963Baesystems Socet Gxp path traversal6.5CISA ADP v3.10.7%2025-10-23
CVE-2025-54856Six Apart Movable Type (Software Edition) Edit ContentData page stored cross-site scripting4.6CNA v4.00.2%2025-10-23
CVE-2025-54808Oxford Nanopore Technologies MinKNOW insufficiently protected credentials7.3CNA v4.00.2%2025-10-23Fix
CVE-2025-54806GROWI cross-site scripting6.1v3.10.2%2025-10-23Fix
CVE-2025-53702DoS vulnerability in Vilar VS-IPC1002 IP cameras6.5NVD v3.10.2%2025-10-23
CVE-2025-53701XSS vulnerability in Vilar VS-IPC1002 IP cameras6.1NVD v3.10.2%2025-10-23
CVE-2025-50951FontForge memory leak6.5CISA ADP v3.10.3%2025-10-23
CVE-2025-50950Audiofile null pointer dereference7.5CISA ADP v3.10.4%2025-10-23Fix
CVE-2025-50949FontForge memory leak6.5CISA ADP v3.10.3%2025-10-23Fix
CVE-2025-48430Gallagher Command Centre Server improper error handling5.5CNA v3.10.1%2025-10-23Fix
CVE-2025-48428Gallagher Command Centre Server cleartext storage of sensitive information6.7CNA v3.10.1%2025-10-23Fix
CVE-2025-47699Gallagher Command Centre Server system information disclosure9.9CNA v3.10.3%2025-10-23Fix
CVE-2025-41402Gallagher Command Centre Server client-side enforcement of server-side security5.5CNA v3.10.1%2025-10-23Fix
CVE-2025-41073Path traversal in Gandia Integra Total by TESI6.5NVD v3.10.4%2025-10-23Fix
CVE-2025-40643Stored cross-site scripting (XSS) in Energy CRM by Status Tracker5.4NVD v3.10.2%2025-10-23
CVE-2025-35981Gallagher Command Centre Server personal information exposure5.5CNA v3.10.1%2025-10-23
CVE-2025-34156Tibbo AggreGate Network Manager System information exposure6.9CNA v4.00.4%2025-10-23Fix
CVE-2025-34155Tibbo AggreGate Network Manager Login Functionality User Enumeration6.9CNA v4.00.5%2025-10-23Fix
CVE-2025-23352NVIDIA Virtual GPU Manager uninitialized pointer access7.8CNA v3.10.2%2025-10-23Fix
CVE-2025-23347NVIDIA GeForce incorrect default permissions7.8CNA v3.10.2%2025-10-23Fix
CVE-2025-23345NVIDIA GeForce out-of-bounds read4.4CNA v3.10.2%2025-10-23Fix
CVE-2025-23332NVIDIA Virtual GPU Manager null pointer dereference5.0CNA v3.10.1%2025-10-23Fix
CVE-2025-23330NVIDIA GeForce null pointer dereference5.5CNA v3.10.2%2025-10-23Fix
CVE-2025-23300NVIDIA Virtual GPU Manager null pointer dereference5.5CNA v3.10.1%2025-10-23Fix
CVE-2025-12114Azure Access Technology BLU-IC2 Serial Console Enabled5.2CNA v4.00.1%2025-10-23
CVE-2025-12110Keycloak does not invalidate offline sessions when the offline_access scope is removed5.4CNA v3.10.3%2025-10-23Fix
CVE-2025-12105Libsoup: Heap use-after-free in libsoup message queue handling during HTTP/2 read completion7.5CNA v3.10.5%2025-10-23Fix
CVE-2025-12104Azure Access Technology BLU-IC2 incorrect Content-Type header10.0CNA v4.00.4%2025-10-23
CVE-2025-12100MongoDB BI Connector ODBC Driver incorrect default permissions8.8CNA v4.00.2%2025-10-23
CVE-2025-12044Vault vulnerable to denial of service due to Rate Limit Regression7.5CNA v3.10.5%2025-10-23Fix
CVE-2025-11621Vault AWS auth method bypass due to AWS client cache8.1CNA v3.10.5%2025-10-23Fix
CVE-2025-11575MongoDB Atlas SQL ODBC Driver incorrect default permissions8.8CNA v4.00.1%2025-10-23
CVE-2025-11429keycloak keycloak-server: Too long and not settings compliant session5.4CNA v3.10.2%2025-10-23Fix
CVE-2025-11128Feedzy RSS Feeds Lite WordPress plugin authenticated (Subscriber+) server-side request forgery5.0CNA v3.10.3%2025-10-23Fix
CVE-2025-11023Local file inclusion in ArkSigner's AcBakImzala9.8CNA v3.10.6%2025-10-23Fix
CVE-2025-10937Oxford Nanopore Technologies MinKNOW improper check for unusual or exceptional conditions6.8CNA v4.00.2%2025-10-23Fix
CVE-2025-10914Reflected XSS in Proliz's OBS7.6CNA v3.10.3%2025-10-23Fix
CVE-2025-10727Reflected XSS in ArkSigner's AcBakImzala5.4CNA v3.10.2%2025-10-23Fix
CVE-2025-10705MxChat AI Chatbot for WordPress plugin unauthenticated blind server-side request forgery5.3CNA v3.10.3%2025-10-23Fix
CVE-2025-10355Open redirection vulnerability in MOLGENIS EMX25.1CNA v4.00.3%2025-10-23
CVE-2025-9981Multiple stored XSS in QuickCMS4.8NVD v3.10.2%2025-10-23
CVE-2025-9980Multiple stored XSS in QuickCMS4.8NVD v3.10.2%2025-10-23
CVE-2025-8427Beaver Builder Plugin (Starter Version) WordPress plugin stored cross-site scripting5.4NVD v3.10.2%2025-10-23Fix
CVE-2025-7730Bold Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-23Fix
CVE-2025-6980Arista Edge Threat Management captive portal can expose sensitive information7.5CNA v3.10.5%2025-10-23
CVE-2025-6979Arista Edge Threat Management captive portal can allow authentication bypass8.8CNA v3.10.5%2025-10-23
CVE-2025-6978Arista Edge Threat Management diagnostics command injection7.2CNA v3.113.4%2025-10-23Emerging Threats
CVE-2025-1680Moxa TN-4500A Series acceptance of untrusted data0.0CNA v4.00.2%2025-10-23Fix
CVE-2025-1679Moxa TN-4500A Series cross-site scripting4.8CNA v4.00.3%2025-10-23Fix
CVE-2025-62775Mercku M6a incorrect resource transfer8.0CNA v3.10.3%2025-10-22
CVE-2025-62774Mercku M6a insufficient entropy3.1CNA v3.10.2%2025-10-22
CVE-2025-62773Mercku M6a hidden functionality2.4CNA v3.10.2%2025-10-22
CVE-2025-62772Mercku M6a authentication bypass3.1CNA v3.10.2%2025-10-22
CVE-2025-62771Mercku M6a cross-site request forgery7.5CNA v3.10.2%2025-10-22
CVE-2025-62710Sakai server secret key generation vulnerability5.9CNA v3.10.2%2025-10-22Fix
CVE-2025-62708pypdf manipulated LZWDecode streams can exhaust RAM6.6CNA v4.00.4%2025-10-22Fix
CVE-2025-62707pypdf affected by possible infinite loop when reading DCT inline images without EOF marker6.6CNA v4.00.4%2025-10-22Fix
CVE-2025-62706Authlib: JWE zip=DEF decompression bomb enables DoS6.5CNA v3.10.5%2025-10-22Fix
CVE-2025-62705OpenBao and Vault leak []byte fields in Audit Logs5.7CNA v4.00.3%2025-10-22Fix
CVE-2025-62659Wikimedia MediaWiki CookieConsent extension cross-site scripting2.1CNA v4.00.3%2025-10-22Fix
CVE-2025-62617Admidio vulnerable to authenticated SQL injection in Member Assignment Functionality7.2CNA v3.10.4%2025-10-22Fix
CVE-2025-62614BookLore Media API authentication bypass8.7CNA v4.00.4%2025-10-22
CVE-2025-62613VDO.Ninja reflected XSS vulnerability in control.html6.9CNA v4.01.2%2025-10-22NucleiFix
CVE-2025-62612FastGPT File Reading Node SSRF6.9CNA v4.00.2%2025-10-22Fix
CVE-2025-62611aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server8.2CNA v4.00.4%2025-10-22Fix
CVE-2025-62610Hono improperly Authorizes JWT Audience Validation8.1CNA v3.10.4%2025-10-22Fix
CVE-2025-62607Nautobot Single Source of Truth (SSoT) has an unauthenticated ServiceNow configuration URL5.3CNA v3.10.3%2025-10-22Fix
CVE-2025-62606mylittleforum my little forum vulnerable to SQL injection in Bookmark Reordering8.8CNA v3.10.4%2025-10-22Fix
CVE-2025-62604MeterSphere logic flaw allows retrieval of arbitrary user information5.3CNA v4.00.4%2025-10-22Fix
CVE-2025-62526OpenWrt ubusd vulnerable to heap buffer overflow7.9CNA v3.10.3%2025-10-22Fix
CVE-2025-62525OpenWrt vulnerable to local privilage escalation7.9CNA v3.10.2%2025-10-22Fix
CVE-2025-62513OpenBao leaks HTTPRawBody in Audit Logs5.7CNA v4.00.3%2025-10-22Fix
CVE-2025-62248Liferay Portal and Liferay DXP vulnerable to reflected cross-site scripting (XSS)4.8CNA v4.00.2%2025-10-22Fix
CVE-2025-62247Liferay Portal and DXP are missing authorization in Collection Provider2.0CNA v4.00.3%2025-10-22Fix
CVE-2025-62073MeetingHub WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62072Front End Users WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62071Social proof testimonials and reviews by Repuso WordPress plugin broken access control4.3CNA v3.10.3%2025-10-22Fix
CVE-2025-62070WowRevenue WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62069MDTF WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62068e2pdf WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62063WP Travel Gutenberg Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62062Easy Post Submission WordPress plugin sensitive data exposure5.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62061Product Catalog Simple WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-10-22Fix
CVE-2025-62060Tab Ultimate WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62058favethemes Houzez Theme Functionality plugin cross-site scripting6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62054favethemes Houzez Theme Functionality plugin remote file inclusion7.5CNA v3.10.4%2025-10-22Fix
CVE-2025-62052One Page Express Companion WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62048SmartCrawl WordPress plugin broken access control5.4CNA v3.10.2%2025-10-22Fix
CVE-2025-62042Event post WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62029Grevo WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-62027Event Tickets WordPress plugin broken access control5.4CNA v3.10.2%2025-10-22Fix
CVE-2025-62026Blockspare WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-10-22Fix
CVE-2025-62025JobSearch WordPress plugin PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-62024Pie Calendar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-62023s2Member WordPress plugin remote code execution (RCE)9.0CNA v3.10.4%2025-10-22Fix
CVE-2025-62022BuddyPress WordPress plugin broken access control7.5CNA v3.10.4%2025-10-22Fix
CVE-2025-62021Acknowledgify WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62020VOD Infomaniak WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-62019Recipe Card Blocks for Gutenberg and Elementor WordPress plugin broken access control6.5CNA v3.10.3%2025-10-22Fix
CVE-2025-62015Advanced Coupons for WooCommerce Coupons WordPress plugin SQL injection7.6CNA v3.10.4%2025-10-22Fix
CVE-2025-62013UiChemy WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-62009UPC/EAN/GTIN Code Generator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-10-22Fix
CVE-2025-62008Product Table For WooCommerce WordPress plugin PHP object injection8.8CNA v3.10.5%2025-10-22Fix
CVE-2025-62007Voice Feedback WordPress plugin privilege escalation8.8CNA v3.10.4%2025-10-22Fix
CVE-2025-62006WP SMS WordPress plugin broken access control5.4CNA v3.10.3%2025-10-22Fix
CVE-2025-62005SUMO Memberships for WooCommerce WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-10-22Fix
CVE-2025-61035seffaflik .kimlik file incorrect default permissions7.7CISA ADP v3.10.1%2025-10-22
CVE-2025-60343Tenda AC6 buffer overflow7.5CISA ADP v3.10.4%2025-10-22
CVE-2025-60342Tenda AC6 stack-based buffer overflow7.5v3.10.4%2025-10-22
CVE-2025-60341Tenda AC6 stack-based buffer overflow7.5v3.10.4%2025-10-22
CVE-2025-60340Tenda AC6 buffer overflow7.5CISA ADP v3.10.4%2025-10-22
CVE-2025-60339Tenda AC6 openSchedWifi function buffer overflow7.5CISA ADP v3.10.4%2025-10-22
CVE-2025-60338Tenda AC6 out-of-bounds write7.5v3.10.5%2025-10-22
CVE-2025-60337Tenda AC6 buffer overflow7.5v3.10.4%2025-10-22
CVE-2025-60336TOTOLINK N600R sub_41773C function null pointer dereference7.5CISA ADP v3.11.8%2025-10-22
CVE-2025-60335TOTOLINK N600R main function null pointer dereference7.5CISA ADP v3.12.1%2025-10-22
CVE-2025-60334TOTOLINK N600R stack-based buffer overflow7.5CISA ADP v3.10.6%2025-10-22
CVE-2025-60333TOTOLINK N600R stack-based buffer overflow7.5CISA ADP v3.10.5%2025-10-22
CVE-2025-60332D-Link DIR-823G SetWLanRadioSettings function null pointer dereference7.5CISA ADP v3.15.0%2025-10-22
CVE-2025-60331D-Link DIR-823G stack-based buffer overflow7.5CISA ADP v3.10.6%2025-10-22
CVE-2025-60246Simple Finance Calculator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-60238UNIVERSAM WordPress plugin PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-60234Single Property WordPress theme PHP object injection8.8CNA v3.10.5%2025-10-22
CVE-2025-60232KBx Pro Ultimate WordPress plugin PHP object injection9.8CNA v3.10.6%2025-10-22
CVE-2025-60228Knowledge Base WordPress theme PHP object injection8.8CNA v3.10.5%2025-10-22
CVE-2025-60227WP Pipes WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2025-10-22
CVE-2025-60226White Rabbit WordPress theme PHP object injection9.8CNA v3.10.6%2025-10-22
CVE-2025-60225BugsPatrol WordPress theme PHP object injection9.8CNA v3.10.6%2025-10-22
CVE-2025-60224Subscribe to Download WordPress plugin PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-60222SUMO Memberships for WooCommerce WordPress plugin privilege escalation8.8CNA v3.10.4%2025-10-22Fix
CVE-2025-60221Captivate Sync WordPress plugin PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-60220CouponXxL WordPress theme privilege escalation9.8CNA v3.10.5%2025-10-22
CVE-2025-60217PT Luxa Addons WordPress plugin arbitrary file deletion7.7CNA v3.10.4%2025-10-22
CVE-2025-60216Addison WordPress theme PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-60215Kriya WordPress theme PHP object injection8.8CNA v3.10.5%2025-10-22
CVE-2025-60214Goldenblatt WordPress theme PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-60213Scape WordPress theme PHP object injection9.8CNA v3.10.6%2025-10-22
CVE-2025-60212VEDA WordPress theme PHP object injection8.8CNA v3.10.5%2025-10-22
CVE-2025-60211WooCommerce Registration Fields Plugin WordPress plugin extendons incorrect privilege assignment8.8CNA v3.10.4%2025-10-22
CVE-2025-60210Everest Forms - Frontend Listing WordPress plugin PHP object injection9.8CNA v3.10.5%2025-10-22
CVE-2025-60209Connector for Gravity Forms and Google Sheets WordPress plugin PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-60208Advanced Custom Fields: CPT Options Pages WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2025-10-22
CVE-2025-60206Alone WordPress theme remote code execution (RCE)10.0CNA v3.10.5%2025-10-22
CVE-2025-60176WP Tesseract WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-10-22
CVE-2025-60168HotelRunner Booking Widget WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-10-22Fix
CVE-2025-60151WP Gravity Forms HubSpot WordPress plugin open redirection4.7CNA v3.10.3%2025-10-22Fix
CVE-2025-60135WeShare Buttons WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-10-22
CVE-2025-60134WP Media Categories WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-10-22Fix
CVE-2025-60132Video Blogster Lite WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-10-22
CVE-2025-60131Werk aan de Muur WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-10-22Fix
CVE-2025-60041Emails Catch All WordPress plugin broken authentication8.8CNA v3.10.5%2025-10-22Fix
CVE-2025-60039Noisa WordPress theme PHP object injection9.8CNA v3.10.6%2025-10-22Fix
CVE-2025-59593Colibri Page Builder WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-10-22Fix
CVE-2025-59580Goodlayers Core WordPress plugin privilege escalation8.8CNA v3.10.4%2025-10-22Fix
CVE-2025-59579Simple Job Board WordPress plugin sensitive data exposure7.5CISA ADP v3.10.4%2025-10-22Fix
CVE-2025-59578ShopMagic WordPress plugin sensitive data exposure5.8CISA ADP v3.10.3%2025-10-22Fix
CVE-2025-59575MasterStudy LMS WordPress plugin sensitive data exposure5.0CISA ADP v3.10.3%2025-10-22Fix
CVE-2025-59571WorkScout-Core WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-59566Workreap (theme's plugin) WordPress plugin arbitrary file deletion7.7CNA v3.10.4%2025-10-22Fix
CVE-2025-59564EduMall WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-59558Billey WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-59557Learts Addons WordPress plugin SQL injection9.3CNA v3.10.4%2025-10-22Fix
CVE-2025-59555Medizin WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-59550Xcare WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-59007TF Woo Product Grid Addon For Elementor WordPress plugin deserialization of untrusted data9.8CNA v3.10.5%2025-10-22
CVE-2025-59006Easy Woocommerce Customizer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-59004WC Return products WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-58971Doctreat WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-58970Doctreat WordPress theme content injection6.3CNA v3.10.3%2025-10-22Fix
CVE-2025-58967Businext WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-58966NEX-Forms LITE WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22Fix
CVE-2025-58963Medcity WordPress theme arbitrary file upload10.0CNA v3.10.5%2025-10-22Fix
CVE-2025-58961CF7 Auto Responder Addon WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22Fix
CVE-2025-58959Taskbot WordPress plugin arbitrary file deletion7.7CNA v3.10.4%2025-10-22Fix
CVE-2025-58958SmilePure WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-58955Karzo WordPress theme local file inclusion8.1CNA v3.10.5%2025-10-22Fix
CVE-2025-58921WP Tactical Popup WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-58916Author: Munzir WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-58712Amq: Privilege escalation via excessive /etc/passwd permissions6.4CNA v3.10.2%2025-10-22Fix
CVE-2025-57870Bug-000179884 There is a security vulnerability in ArcGIS Server feature services10.0CNA v3.10.5%2025-10-22Fix
CVE-2025-56447TM2 Monitoring authentication bypass9.8CISA ADP v3.10.3%2025-10-22
CVE-2025-53428Simple User Registration WordPress plugin privilege escalation8.8CNA v3.10.4%2025-10-22
CVE-2025-53427SEO Pyramid WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-53426Likert Survey Master WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53425Dokan WordPress plugin privilege escalation7.2CNA v3.10.4%2025-10-22Fix
CVE-2025-53424WooCommerce Orders and Customers Exporter WordPress plugin broken access control6.5CNA v3.10.3%2025-10-22
CVE-2025-53423Triss WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53422WhatsApp Chat for WordPress and WooCommerce plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-53421Accordion WordPress plugin broken access control6.5CNA v3.10.3%2025-10-22Fix
CVE-2025-53420WPLMS WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53352Grid Plus WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53351Fidelo Snippet WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53350Calendar Plus WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53297Woocommerce Envato Affiliates WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-53238Toast Mobile Menu WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-53236UDesign Core WordPress plugin broken access control6.3CNA v3.10.2%2025-10-22
CVE-2025-53234UDesign Core WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-53232WP Gmail SMTP WordPress plugin sensitive data exposure5.8CISA ADP v3.10.3%2025-10-22
CVE-2025-53229RockON DJ WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-53218AppExperts WordPress plugin sensitive data exposure5.8CISA ADP v3.10.3%2025-10-22
CVE-2025-52770Hello Followers WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52763Nifty Backups WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52760MultiSite Clone Duplicator WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52758Zippy WordPress plugin arbitrary file upload9.1CNA v3.10.5%2025-10-22
CVE-2025-52757SUMO Memberships for WooCommerce WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.3%2025-10-22Fix
CVE-2025-52756WP Last Modified Info WordPress plugin remote code execution (RCE)7.4CNA v3.10.3%2025-10-22Fix
CVE-2025-52755Child Themes WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52754Sello ChannelConnector WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52753Contact Form by Supsystic WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-52752IDonatePro WordPress plugin sensitive data exposure6.5CNA v3.10.3%2025-10-22
CVE-2025-52751Slide Puzzle WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52750Emu2 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52749Uji Countdown WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52748Directory Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52743oik-privacy-policy WordPress plugin cross-site scripting (XSS)7.1CISA ADP v3.10.3%2025-10-22Fix
CVE-2025-52742Pets WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52741Post Connector WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52740Boldermail WordPress plugin PHP object injection8.8CNA v3.10.5%2025-10-22
CVE-2025-52738Wikipedia Preview WordPress plugin broken access control6.5CNA v3.10.3%2025-10-22Fix
CVE-2025-52737WP Store Locator WordPress plugin PHP object injection8.8CNA v3.10.5%2025-10-22Fix
CVE-2025-52736Finale Lite WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-52735NextMove Lite WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-52734CropRefine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49992LearnPress Export Import WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-49963Simple Stripe Checkout WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49962bbPress Notify WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-49961Breeze Checkout WordPress plugin broken access control6.5CNA v3.10.3%2025-10-22
CVE-2025-49960LeadBI Plugin for WordPress cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22
CVE-2025-49959bbPress Move Topics WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49958Robokassa payment gateway for Woocommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-49957Email Attachment by Order Status and Products WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-49956Fade Slider WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-49955WP Smart Flexslider WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49954WP-Click-Tracker WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-49953ShareBang, Ultimate Social Share Buttons for WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-49952Houzez WordPress theme insecure direct object references (IDOR)6.5CNA v3.10.4%2025-10-22
CVE-2025-49951gAppointments WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49950Official Integration for Billingo WordPress plugin privilege escalation7.2CNA v3.10.5%2025-10-22Fix
CVE-2025-49949Templazee WordPress plugin broken access control5.4CNA v3.10.3%2025-10-22
CVE-2025-49948WP Super Edit WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49947extendons WooCommerce Registration Fields plugin reflected cross-site scripting7.1CNA v3.10.3%2025-10-22
CVE-2025-49946Auto Login After Registration WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49945Shortcode Generator WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49944WPCode Content Ratio WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-49940Fusion Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49939JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49938JetEngine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49937Smash Balloon Social Post Feed WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-49936WoodMart WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49935WoodMart WordPress theme local file inclusion7.5CNA v3.10.5%2025-10-22Fix
CVE-2025-49934JetBlocks For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49933JetBlog WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49932JetBlog WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49931JetSearch WordPress plugin SQL injection9.3CNA v3.10.4%2025-10-22Fix
CVE-2025-49930JetSearch WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-49929Ultimate Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49928JetWooBuilder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49927JetWooBuilder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49926Kalium WordPress theme arbitrary code execution7.2CNA v3.10.3%2025-10-22Fix
CVE-2025-49925WPLMS WordPress plugin broken access control7.5CNA v3.10.4%2025-10-22Fix
CVE-2025-49924Wholesale Suite WordPress plugin privilege escalation7.2CNA v3.10.4%2025-10-22Fix
CVE-2025-49923Seriously Simple Podcasting WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-10-22Fix
CVE-2025-49922WPeMatico RSS Feed Fetcher WordPress plugin broken access control4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-49921JetReviews WordPress plugin local file inclusion7.5CNA v3.10.5%2025-10-22Fix
CVE-2025-49920Web Accessibility By accessiBe WordPress plugin broken access control5.4CNA v3.10.3%2025-10-22Fix
CVE-2025-49917Icegram Express Pro WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2025-10-22Fix
CVE-2025-49916MultiVendorX WordPress plugin broken access control8.6CNA v3.10.3%2025-10-22Fix
CVE-2025-49915SMS Alert Order Notifications WordPress plugin SQL injection9.3CNA v3.10.5%2025-10-22Fix
CVE-2025-49913CoSchedule WordPress plugin broken access control5.3CNA v3.10.3%2025-10-22Fix
CVE-2025-49912Email Subscription Popup WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-10-22Fix
CVE-2025-49911WooCommerce Vehicle Parts Finder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22Fix
CVE-2025-49910WPGuppy WordPress plugin broken access control8.2CNA v3.10.3%2025-10-22Fix
CVE-2025-49908WPC Countdown Timer for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-10-22Fix
CVE-2025-49907MDTF WordPress plugin broken access control4.3CNA v3.10.3%2025-10-22Fix
CVE-2025-49906WPComplete WordPress plugin broken access control5.3CNA v3.10.3%2025-10-22Fix
CVE-2025-49903ZoloBlocks WordPress plugin broken access control5.3CNA v3.10.3%2025-10-22Fix
CVE-2025-49901Simple Link Directory WordPress plugin broken authentication9.8CNA v3.10.7%2025-10-22Exploit codeFix
CVE-2025-49899Whydonate WordPress plugin broken access control5.3CNA v3.10.3%2025-10-22Fix
CVE-2025-49380WooCommerce Vehicle Parts Finder WordPress plugin PHP object injection9.8CNA v3.10.5%2025-10-22Fix
CVE-2025-49378Hydra Booking WordPress plugin SQL injection8.5CNA v3.10.4%2025-10-22Fix
CVE-2025-49377Hydra Booking WordPress plugin broken access control6.3CNA v3.10.2%2025-10-22Fix
CVE-2025-49376DELUCKS SEO WordPress plugin broken access control5.3CNA v3.10.4%2025-10-22Fix
CVE-2025-49374Captcha.eu WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.2%2025-10-22Fix
CVE-2025-49373Evergreen Content Poster WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-10-22Fix
CVE-2025-49060Wastia WordPress theme arbitrary file upload10.0CNA v3.10.5%2025-10-22Fix
CVE-2025-48338WP Abstracts WordPress plugin local file inclusion7.5CNA v3.10.5%2025-10-22Fix
CVE-2025-48106Clanora WordPress theme arbitrary file upload10.0CNA v3.10.6%2025-10-22Fix
CVE-2025-48099Search and Filter WordPress plugin cross-site request forgery (CSRF) to open redirect4.7CNA v3.10.2%2025-10-22Fix
CVE-2025-48098Survey Maker WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22Fix
CVE-2025-48097WSAnalytics WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-10-22
CVE-2025-48096Custom CSS WordPress plugin broken access control6.5CNA v3.10.3%2025-10-22
CVE-2025-48095Survey Maker WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-10-22Fix
CVE-2025-48093Password only login WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22
CVE-2025-48092jurajpuchky Fix Multiple Redirects reflected cross-site scripting7.1CNA v3.10.3%2025-10-22
CVE-2025-48091AnyComment WordPress plugin SQL injection8.5CNA v3.10.4%2025-10-22
CVE-2025-48082Progress Planner WordPress plugin privilege escalation8.8CNA v3.10.5%2025-10-22Fix
CVE-2025-41724Sauter: Crash via Incomplete SOAP request7.5CNA v3.10.5%2025-10-22Fix
CVE-2025-41723Sauter: Directory traversal in importFile SOAP method9.8CNA v3.11.3%2025-10-22Fix
CVE-2025-41722Sauter: Hard-coded Authentication Credentials7.5CNA v3.10.3%2025-10-22Fix
CVE-2025-41721Sauter: Command injection2.7CNA v3.10.2%2025-10-22Fix
CVE-2025-41720Sauter: Arbitrary file upload4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-41719Sauter: Improper validation of user-controlled data8.8CNA v3.10.5%2025-10-22Fix
CVE-2025-41110Improper authentication vulnerability in Ghost Robotics' Vision 608.8NVD v3.10.3%2025-10-22
CVE-2025-41109Ghost Robotics Vision 60 physical network ports hard-coded credentials4.6NVD v3.10.6%2025-10-22
CVE-2025-41108Improper authentication vulnerability in Ghost Robotics' Vision 609.8NVD v3.10.3%2025-10-22
CVE-2025-40780ISC BIND 9 cache poisoning due to weak PRNG8.6CNA v3.10.5%2025-10-22Fix
CVE-2025-40778ISC BIND 9 cache poisoning attacks with unsolicited RRs8.6CNA v3.10.7%2025-10-22Exploit codeFix
CVE-2025-39534Terms Dictionary WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-10-22Fix
CVE-2025-32657Testimonial Slider and Showcase Pro WordPress plugin local file inclusion7.5CNA v3.10.6%2025-10-22
CVE-2025-32283Solar Energy WordPress theme PHP object injection8.8CNA v3.10.6%2025-10-22
CVE-2025-31634Insurance WordPress theme PHP object injection8.8CNA v3.10.6%2025-10-22
CVE-2025-30944WordPress Tablesome Table Premium plugin broken access control7.5CNA v3.10.4%2025-10-22
CVE-2025-24934FreeBSD SO_REUSEPORT_LB breaks connect(2) for UDP sockets5.4CISA ADP v3.10.2%2025-10-22Fix
CVE-2025-23299NVIDIA BlueField GA out-of-bounds write6.7CNA v3.10.2%2025-10-22Fix
CVE-2025-22178Atlassian Jira Align missing authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22177Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22176Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22175Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22174Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22173Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22172Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22171Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22170Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22169Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22168Atlassian Jira Align improper authorization5.3CNA v4.00.2%2025-10-22Fix
CVE-2025-22167Atlassian Jira Software Data Center path traversal8.7CNA v4.00.5%2025-10-22Fix
CVE-2025-12033Simple Banner WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-10-22Fix
CVE-2025-11966Eclipse Foundation Vert.x Vert.x-Web vulnerable to stored cross-site scripting in directory listings2.3CNA v4.00.3%2025-10-22Fix
CVE-2025-11965Eclipse Foundation Vert.x files accessible to external parties6.3CNA v4.00.5%2025-10-22Fix
CVE-2025-11958Devolutions Server Security Dashboard ignored-tasks API improper input validation5.1CNA v4.00.4%2025-10-22Fix
CVE-2025-11957Devolutions Server temporary access workflow improper authorization9.0CNA v4.00.3%2025-10-22Fix
CVE-2025-11952Stored cross-site scripting (XSS) in Oct8ne Chatbot6.1NVD v3.10.2%2025-10-22Fix
CVE-2025-11915HTTP Desynchronisation in Vertex AI for certain third-party models6.9CNA v4.00.3%2025-10-22Fix
CVE-2025-11883Responsive Progress Bar WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11880SM CountDown Widget WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11878ST Categories Widget WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11872Material Design Iconic Font Integration WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11870Simple Business Data WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11867Bg Book Publisher WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11866Photographers galleries WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11844XPath injection in Hugging Face Smolagents search_item_ctrl_f function5.4CNA v3.00.3%2025-10-22Fix
CVE-2025-11834WP AD Gallery WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11830WP Restaurant Listings WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11827Oboxmedia Ads WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11825Playerzbr WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11824Cinza Grid WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22Fix
CVE-2025-11819WP-Thumbnail WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.2%2025-10-22
CVE-2025-11818WP Responsive Meet The Team WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11817Simple Tableau Viz WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11813Responsive iframe GoogleMap WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11811Simple Youtube Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11810Print Button Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11809WP-Force Images Download WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22Fix
CVE-2025-11807Mixlr Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-11804JB News Ticker WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-10-22
CVE-2025-11750User Enumeration via Distinct Error messages in langgenius/dify-web5.3NVD v3.10.7%2025-10-22Nuclei
CVE-2025-11411NLnet Labs Unbound possible domain hijacking via promiscuous records in the authority section5.7CNA v4.00.3%2025-10-22Fix
CVE-2025-11086Academy LMS Pro WordPress plugin unauthenticated privilege escalation via Social login Addon8.1CNA v3.10.4%2025-10-22Fix
CVE-2025-10651Welcart e-Commerce WordPress plugin stored cross-site scripting5.5CNA v3.10.2%2025-10-22Fix
CVE-2025-10638NS Maintenance Mode for WP WordPress plugin unauthenticated Subscribers export5.3CISA ADP v3.10.2%2025-10-22
CVE-2025-10588PixelYourSite cross-site request forgery to GDPR Options Modification4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-10570Flexible Refund and Return Order for WooCommerce WordPress plugin missing authorization4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-10138This-or-That by André Boekhorst WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-22
CVE-2025-10047Email Tracker WordPress plugin authenticated (Admin+) SQL injection4.9CNA v3.10.4%2025-10-22Fix
CVE-2025-8848HTML injection in Accept-Language header in danny-avila/LibreChat5.4NVD v3.10.5%2025-10-22Nuclei
CVE-2025-8677ISC BIND 9 resource exhaustion via malformed DNSKEY handling7.5CNA v3.110.7%2025-10-22Fix
CVE-2025-6833All in One Time Clock Lite WordPress plugin insecure direct object reference4.3CNA v3.10.2%2025-10-22Fix
CVE-2025-5983Meta Tag Manager WordPress plugin Contributor+ open redirect6.5CISA ADP v3.10.3%2025-10-22Fix
CVE-2025-62763Zimbra Collaboration server-side request forgery5.0CNA v3.10.3%2025-10-21Fix
CVE-2025-62702The Wikimedia Foundation MediaWiki PageTriage extension stored XSS through system messages6.9CNA v4.00.4%2025-10-21Fix
CVE-2025-62701The Wikimedia Foundation Mediawiki stored XSS through system messages6.9CNA v4.00.4%2025-10-21Fix
CVE-2025-62699The Wikimedia Foundation Mediawiki information disclosure6.9CNA v4.00.4%2025-10-21Fix
CVE-2025-62696The Wikimedia Foundation Mediawiki Foundation multiple critical security issues in Springboard6.9CNA v4.01.4%2025-10-21
CVE-2025-62695The Wikimedia Foundation Mediawiki stored XSS through system messages6.9CNA v4.00.4%2025-10-21
CVE-2025-62694The Wikimedia Foundation Mediawiki stored XSS through a system message6.9CNA v4.00.5%2025-10-21
CVE-2025-62661The Wikimedia Foundation Mediawiki incorrect default permissions6.9CNA v4.00.4%2025-10-21Fix
CVE-2025-62641Oracle VM VirtualBox Core component takeover8.2CNA v3.10.2%2025-10-21Exploit codeFix
CVE-2025-62605Mastodon quotes control can be bypassed4.3CNA v3.10.3%2025-10-21Fix
CVE-2025-62598WeGIA vulnerable to reflected cross-site scripting6.9CNA v4.00.2%2025-10-21Fix
CVE-2025-62597WeGIA vulnerable to reflected cross-site scripting6.9CNA v4.00.3%2025-10-21Fix
CVE-2025-62595Koa vulnerable to open redirect via Trailing Double-Slash (//) in back Redirect Logic4.3CNA v3.10.3%2025-10-21Fix
CVE-2025-62592Oracle VM VirtualBox Core component unauthorized data access6.0CNA v3.10.2%2025-10-21Fix
CVE-2025-62591Oracle VM VirtualBox Core component unauthorized data access6.0CNA v3.10.2%2025-10-21Fix
CVE-2025-62590Oracle VM VirtualBox Core component takeover8.2CNA v3.10.2%2025-10-21Fix
CVE-2025-62589Oracle VM VirtualBox Core component takeover8.2CNA v3.10.2%2025-10-21Fix
CVE-2025-62588Oracle VM VirtualBox Core component takeover8.2CNA v3.10.2%2025-10-21Fix
CVE-2025-62587Oracle VM VirtualBox Core component takeover8.2CNA v3.10.2%2025-10-21Fix
CVE-2025-62518astral-sh tokio-tar astral-tokio-tar vulnerable to PAX Header Desynchronization8.1CNA v3.10.7%2025-10-21Exploit codeFix
CVE-2025-62481Oracle E-Business Suite Marketing Administration component takeover9.8CNA v3.10.6%2025-10-21Fix
CVE-2025-62480Oracle ZFS Storage Appliance Kit Naming subsystem component denial of service2.7CNA v3.10.3%2025-10-21Fix
CVE-2025-62479Oracle ZFS Storage Appliance Kit Block Storage component denial of service2.7CNA v3.10.3%2025-10-21Fix
CVE-2025-62478Oracle ZFS Storage Appliance Kit Object Store component denial of service4.9CNA v3.10.3%2025-10-21Fix
CVE-2025-62477Oracle ZFS Storage Appliance Kit Remote Replication component denial of service4.9CNA v3.10.3%2025-10-21Fix
CVE-2025-62476Oracle ZFS Storage Appliance Kit Remote Replication component denial of service4.9CNA v3.10.3%2025-10-21Fix
CVE-2025-62475Oracle ZFS Storage Appliance Kit Core component denial of service4.9CNA v3.10.3%2025-10-21Fix
CVE-2025-62290Oracle ZFS Storage Appliance Kit Block Storage component takeover7.2CNA v3.10.4%2025-10-21Fix
CVE-2025-62289Oracle ZFS Storage Appliance Kit Filesystems component denial of service4.9CNA v3.10.3%2025-10-21Fix
CVE-2025-62288Oracle Health Sciences Data Management Workbench Logger component unauthorized data access4.9CNA v3.10.3%2025-10-21Fix
CVE-2025-62287Oracle Life Sciences InForm Web Server component unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-62250Liferay Portal fails to verify messages from the cluster network is trusted6.9CNA v4.00.2%2025-10-21Fix
CVE-2025-62249Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget6.9CNA v4.00.2%2025-10-21Fix
CVE-2025-61885Oracle Life Sciences InForm Web Server component information disclosure4.3CNA v3.10.2%2025-10-21Fix
CVE-2025-61881Oracle Database Server improper access control5.9CNA v3.10.2%2025-10-21Fix
CVE-2025-61764Oracle WebLogic Server Core component information disclosure5.3CNA v3.10.3%2025-10-21Fix
CVE-2025-61763Oracle Essbase unauthorized access8.1CNA v3.10.3%2025-10-21Fix
CVE-2025-61762Oracle PeopleSoft Enterprise FIN Payables unauthorized data modification6.3CNA v3.10.2%2025-10-21Fix
CVE-2025-61761Oracle PeopleSoft Enterprise FIN Maintenance Management unauthorized data modification5.4CNA v3.10.2%2025-10-21Fix
CVE-2025-61760Oracle VM VirtualBox Core component takeover7.5CNA v3.10.2%2025-10-21Fix
CVE-2025-61759Oracle VM VirtualBox Core component unauthorized data access6.5CNA v3.10.2%2025-10-21Fix
CVE-2025-61758Oracle PeopleSoft Enterprise FIN IT Asset Management unauthorized data access6.5CNA v3.10.3%2025-10-21Fix
CVE-2025-61757Oracle Fusion Middleware missing authentication for critical function9.8CNA v3.188.6%2025-10-21KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-61756Oracle Financial Services Analytical Applications Infrastructure denial of service7.5CNA v3.10.3%2025-10-21Fix
CVE-2025-61755Oracle GraalVM for JDK Compiler component information disclosure3.7CNA v3.10.3%2025-10-21Fix
CVE-2025-61754Oracle BI Publisher Web Service API component unauthorized data access6.5CNA v3.10.3%2025-10-21Fix
CVE-2025-61753Oracle E-Business Suite Scripting Miscellaneous component unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-61752Oracle WebLogic Server Core component denial of service7.5CNA v3.10.4%2025-10-21Fix
CVE-2025-61751Oracle Financial Services Analytical Applications Infrastructure unauthorized data access8.1CNA v3.10.3%2025-10-21Fix
CVE-2025-61750Oracle PeopleSoft Enterprise PeopleTools Query component information disclosure4.3CNA v3.10.3%2025-10-21Fix
CVE-2025-61749Oracle Database Server improper access control2.7CNA v3.10.3%2025-10-21Fix
CVE-2025-61748Oracle Java SE improper access control3.7CNA v3.10.4%2025-10-21Fix
CVE-2025-61457Code16 Sharp vulnerable to cross-site scripting (XSS)6.1CISA ADP v3.10.3%2025-10-21Fix
CVE-2025-61255PHPGurukul Bank Locker Management System cross-site scripting6.1CISA ADP v3.10.2%2025-10-21
CVE-2025-61220AutoBizLine login verification authentication bypass7.5CISA ADP v3.10.3%2025-10-21
CVE-2025-61194DaiCuo SQL injection6.5CISA ADP v3.10.2%2025-10-21
CVE-2025-61181DaiCuo unrestricted file upload6.5CISA ADP v3.10.3%2025-10-21
CVE-2025-60934HR Performance Solutions Performance Pro index.php stored cross-site scripting6.1CISA ADP v3.10.2%2025-10-21
CVE-2025-60933HR Performance Solutions Performance Pro Future Goals function stored cross-site scripting6.1CISA ADP v3.10.2%2025-10-21
CVE-2025-60932HR Performance Solutions Performance Pro Current Goals function stored cross-site scripting6.1CISA ADP v3.10.2%2025-10-21
CVE-2025-60790ProcessWire CMS vulnerable to resource-exhaustion denial of service6.5CISA ADP v3.10.4%2025-10-21
CVE-2025-60772NETLINK HG322G web management interface improper authentication9.8CISA ADP v3.10.6%2025-10-21
CVE-2025-60751GeographicLib GeoConvert DMS decoder stack-based buffer overflow7.5CISA ADP v3.12.3%2025-10-21Exploit codeFix
CVE-2025-60511Moodle OpenAI Chat Block plugin insecure direct object reference4.3CISA ADP v3.10.2%2025-10-21
CVE-2025-60507Moodle GeniAI plugin cross-site scripting8.9CNA v3.10.3%2025-10-21
CVE-2025-60506Moodle PDF Annotator plugin stored cross-site scripting5.4CISA ADP v3.10.2%2025-10-21
CVE-2025-60500QDOCS Smart School unrestricted file upload7.2CISA ADP v3.10.5%2025-10-21Exploit code
CVE-2025-60427LibreTime analytics API improper access control6.5CISA ADP v3.10.4%2025-10-21
CVE-2025-60344D-Link DSR-150 A path traversal6.6CISA ADP v3.110.9%2025-10-21
CVE-2025-60280Hockeycomputindo Bang Resto cross-site scripting6.1CISA ADP v3.10.3%2025-10-21
CVE-2025-59438Arm mbed TLS timing side channel5.3CISA ADP v3.10.3%2025-10-21Fix
CVE-2025-57521Bambu Studio network plugin loader vulnerability6.1CISA ADP v3.10.2%2025-10-21
CVE-2025-56802Reolink hard-coded cryptographic key5.1CISA ADP v3.10.1%2025-10-21Exploit code
CVE-2025-56801Reolink hard-coded cryptographic key5.1CISA ADP v3.10.1%2025-10-21Exploit code
CVE-2025-56800Reolink authentication bypass by spoofing5.1CISA ADP v3.10.3%2025-10-21Exploit code
CVE-2025-56799Reolink command injection6.5CISA ADP v3.11.2%2025-10-21Exploit code
CVE-2025-56450Log2Space Subscriber Management Software selfcareLeadHistory endpoint SQL injection6.5CISA ADP v3.10.3%2025-10-21
CVE-2025-53072Oracle E-Business Suite Marketing Administration component takeover9.8CNA v3.10.6%2025-10-21Fix
CVE-2025-53071Oracle E-Business Suite Applications Framework unauthorized data modification4.3CNA v3.10.2%2025-10-21Fix
CVE-2025-53070Oracle Solaris Filesystem component denial of service5.5CNA v3.10.1%2025-10-21Fix
CVE-2025-53069Oracle MySQL Server components services component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53068Oracle Solaris Kernel component denial of service6.5CNA v3.10.1%2025-10-21Fix
CVE-2025-53067Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53066Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access7.5CNA v3.10.7%2025-10-21Fix
CVE-2025-53065Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification5.4CNA v3.10.2%2025-10-21Fix
CVE-2025-53064Oracle E-Business Suite Applications Framework unauthorized data modification4.3CNA v3.10.2%2025-10-21Fix
CVE-2025-53063Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification5.4CNA v3.10.2%2025-10-21Fix
CVE-2025-53062Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53061Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification5.5CNA v3.10.2%2025-10-21Fix
CVE-2025-53060Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-53059Oracle PeopleSoft Enterprise PeopleTools OpenSearch Dashboards component unauthorized data access4.9CNA v3.10.4%2025-10-21Fix
CVE-2025-53058Oracle E-Business Suite Applications Manager unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-53057Oracle Java SE improper access control5.9CNA v3.10.5%2025-10-21Fix
CVE-2025-53056Oracle JD Edwards EnterpriseOne Tools unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-53055Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-53054Oracle MySQL Server InnoDB component unauthorized data modification5.5CNA v3.10.5%2025-10-21Fix
CVE-2025-53053Oracle MySQL Server DML component unauthorized data modification5.5CNA v3.10.5%2025-10-21Fix
CVE-2025-53052Oracle E-Business Suite Workflow Notification Mailer component unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-53051Oracle Database Server out-of-bounds read2.7CNA v3.10.3%2025-10-21Fix
CVE-2025-53050Oracle PeopleSoft Enterprise PeopleTools Performance Monitor component denial of service7.5CNA v3.10.4%2025-10-21Fix
CVE-2025-53049Oracle Business Intelligence Enterprise Edition Analytics Web Administration component takeover8.4CNA v3.10.4%2025-10-21Fix
CVE-2025-53048Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor component unauthorized data modification5.4CNA v3.10.2%2025-10-21Fix
CVE-2025-53047Oracle Database Server information disclosure5.8CNA v3.10.3%2025-10-21Fix
CVE-2025-53046Oracle ZFS Storage Appliance Kit Analytics component denial of service4.9CNA v3.10.4%2025-10-21Fix
CVE-2025-53045Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53044Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53043Oracle E-Business Suite Product Hub Item Catalog component unauthorized data access8.1CNA v3.10.4%2025-10-21Fix
CVE-2025-53042Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53041Oracle E-Business Suite iStore Shopping Cart component unauthorized data modification6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-53040Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.6%2025-10-21Fix
CVE-2025-53037Oracle Financial Services Analytical Applications Infrastructure Platform component takeover9.8CNA v3.10.5%2025-10-21Fix
CVE-2025-53036Oracle Financial Services Analytical Applications Infrastructure unauthorized data access8.6CNA v3.10.4%2025-10-21Fix
CVE-2025-53035Oracle Financial Services Analytical Applications Infrastructure unauthorized data access6.5CNA v3.10.3%2025-10-21Fix
CVE-2025-53034Oracle Financial Services Analytical Applications Infrastructure unauthorized data modification5.4CNA v3.10.2%2025-10-21Fix
CVE-2025-52079D-Link DIR-820L improper access control8.8CISA ADP v3.10.5%2025-10-21
CVE-2025-50075Oracle Financial Services Revenue Management and Billing unauthorized data access6.5CNA v3.10.3%2025-10-21Fix
CVE-2025-50074Oracle Financial Services Revenue Management and Billing unauthorized data access4.9CNA v3.10.4%2025-10-21Fix
CVE-2025-26392SolarWinds Observability Self-Hosted SQL injection5.4CNA v3.10.2%2025-10-21Fix
CVE-2025-22166Atlassian Confluence Data Center resource amplification8.3CNA v4.00.5%2025-10-21Fix
CVE-2025-12031Azure Access Technology BLU-IC2 HTTP Security Misconfiguration Lacking Secure and HTTPOnly attribute5.3CNA v4.00.2%2025-10-21
CVE-2025-12004The Wikimedia Foundation Mediawiki the compare API module breaks Extension:Lockdown10.0CNA v4.00.3%2025-10-21Fix
CVE-2025-11949Digiwin｜EasyFlow .NET and EasyFlow AiNet missing authentication8.7CNA v4.00.4%2025-10-21Fix
CVE-2025-11757Improper neutralization of Wildcards or Matching Symbols in CloudEdge Online Cameras and App8.7CNA v4.00.3%2025-10-21
CVE-2025-11625wolfSSL wolfSSH host verification bypass and credential leak9.4CNA v4.00.4%2025-10-21
CVE-2025-11624wolfSSH buffer overwrite when processing file handles with the SFTP server1.8CNA v4.00.4%2025-10-21
CVE-2025-11534Authentication bypass using an alternate path or channel in Raisecomm RAX701-GC Series9.3CNA v4.00.7%2025-10-21
CVE-2025-11151Information disclosure in Beyaz Computer's CityPLus8.2CNA v3.10.3%2025-10-21Fix
CVE-2025-10916FormGent WordPress plugin unauthenticated arbitrary file deletion9.1CISA ADP v3.10.4%2025-10-21Fix
CVE-2025-10641Unencrypted cleartext communication in EfficientLab WorkExaminer Professional7.1CISA ADP v3.10.3%2025-10-21
CVE-2025-10640Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional9.8CISA ADP v3.10.9%2025-10-21
CVE-2025-10639Usage of Hard-coded FTP Credentials EfficientLab WorkExaminer Professional8.8CISA ADP v3.10.9%2025-10-21
CVE-2025-10612XSS in GiSoft's City Guide6.1CNA v3.10.2%2025-10-21Fix
CVE-2025-10020Zoho ManageEngine ADManager Plus command injection8.5CNA v3.14.5%2025-10-21Fix
CVE-2025-9428Zoho Analytics Plus SQL injection8.3CNA v3.127.4%2025-10-21Fix
CVE-2025-9339SQL injection in Simple.ERP7.1CNA v4.00.3%2025-10-21Fix
CVE-2025-9133Zyxel ATP series firmware missing authorization8.1CNA v3.15.5%2025-10-21Fix
CVE-2025-8078Zyxel ATP series firmware command injection7.2CNA v3.11.4%2025-10-21Emerging ThreatsFix
CVE-2025-8050External Control of file vulnerability has been discovered in OpenText Flipper5.3CNA v4.00.3%2025-10-21Fix
CVE-2025-7851TP-Link Systems Omada Gateways unauthorized root access via debug functionality8.7CNA v4.00.7%2025-10-21Fix
CVE-2025-7850TP-Link Systems Omada Gateways authenticated OS command execution9.3CNA v4.03.3%2025-10-21Fix
CVE-2025-7473Zoho Endpoint Central XML injection5.2CNA v3.10.3%2025-10-21Fix
CVE-2025-6542TP-Link Systems Omada Gateways OS command injection in multiple parameters9.3CNA v4.01.0%2025-10-21Fix
CVE-2025-6541TP-Link Systems Omada Gateways OS command injection8.6CNA v4.00.7%2025-10-21Fix
CVE-2025-6239Zoho ManageEngine Applications Manager information disclosure6.5CNA v3.11.0%2025-10-21Fix
CVE-2025-5496Zoho Endpoint Central arbitrary file deletion3.3CNA v3.10.3%2025-10-21Fix
CVE-2025-62700The Wikimedia Foundation Mediawiki stored XSS through a system message in MultiBoilerplate6.9CNA v4.00.3%2025-10-20Fix
CVE-2025-62698The Wikimedia Foundation Mediawiki stored XSS through system messages in ExternalGuidance6.9CNA v4.00.3%2025-10-20Fix
CVE-2025-62697The Wikimedia Foundation Mediawiki improperly sanitized style parameter in LanguageSelector8.8CNA v4.00.3%2025-10-20Fix
CVE-2025-62693The Wikimedia Foundation Mediawiki stored XSS through system messages in LastModified6.9CNA v4.00.3%2025-10-20Fix
CVE-2025-62658SQL injection in WatchAnalytics through Special:ClearPendingReviews7.5CNA v4.00.2%2025-10-20
CVE-2025-62657Stored XSS through system messages in PageForms5.8CNA v4.00.3%2025-10-20
CVE-2025-62656GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS5.8CNA v4.00.3%2025-10-20
CVE-2025-62577Fsas Technologies ETERNUS SF AdvancedCopy Manager Standard Edition incorrect default permissions8.4CNA v4.00.2%2025-10-20
CVE-2025-62528Taguette cross-site scripting vulnerability5.4CNA v3.10.2%2025-10-20Fix
CVE-2025-62527Taguette vulnerable to password reset link poisoning7.1CNA v3.10.3%2025-10-20Fix
CVE-2025-62522vite allows server.fs.deny bypass via backslash on Windows6.0CNA v4.01.1%2025-10-20NucleiFix
CVE-2025-62510FileRise insecure folder visibility via name-based mapping and incomplete ACL checks8.1CNA v3.10.3%2025-10-20Fix
CVE-2025-62509FileRise improper ownership/permission validation allowed cross-tenant file operations8.1CNA v3.10.3%2025-10-20Fix
CVE-2025-62429ClipBucket v5 executes arbitrary PHP code7.2CNA v3.10.8%2025-10-20Exploit codeFix
CVE-2025-61932Motex LANSCOPE Endpoint Manager improper verification of source of a communication channel9.3CNA v4.02.8%2025-10-20KEVFix
CVE-2025-61488Senayan Library Management System scrap_image.php server-side request forgery7.6CISA ADP v3.10.4%2025-10-20
CVE-2025-61456Bhabishya-123 E-commerce cross-site scripting6.1CISA ADP v3.10.3%2025-10-20Exploit code
CVE-2025-61455Bhabishya-123 E-commerce SQL injection9.8CISA ADP v3.10.6%2025-10-20
CVE-2025-61454Bhabishya-123 E-commerce cross-site scripting6.1CISA ADP v3.10.3%2025-10-20Exploit code
CVE-2025-61417TastyIgniter vulnerable to cross-site scripting8.8CISA ADP v3.10.6%2025-10-20
CVE-2025-61303Hatching Triage Sandbox behavioral analysis engine resource exhaustion9.8CISA ADP v3.10.5%2025-10-20Exploit code
CVE-2025-61301CAPEv2 reporting module denial of service7.5CISA ADP v3.10.4%2025-10-20Exploit code
CVE-2025-60856Reolink Video Doorbell WiFi UART serial console missing authentication6.8CISA ADP v3.10.3%2025-10-20
CVE-2025-60783Rajvi-patel-22 Restaurant-management-system-dbms-project There is a SQL injection6.5CISA ADP v3.10.3%2025-10-20
CVE-2025-60781Iqbolshoh PHP Education Management cross-site scripting6.1CISA ADP v3.10.2%2025-10-20
CVE-2025-57839Honor Magic OS information disclosure4.0CNA v3.10.2%2025-10-20Fix
CVE-2025-57838Honor Magic OS information disclosure4.0CNA v3.10.2%2025-10-20Fix
CVE-2025-57837Honor FCP-AN10 information disclosure2.9CNA v3.10.2%2025-10-20Fix
CVE-2025-57738Apache Syncope: Remote code execution by delegated administrators7.2CISA ADP v3.123.2%2025-10-20Fix
CVE-2025-56224Ascertia Signinghub missing brute-force protection8.1CISA ADP v3.10.4%2025-10-20
CVE-2025-56223Ascertia Signinghub resource exhaustion7.5CISA ADP v3.10.5%2025-10-20
CVE-2025-56219Ascertia Signinghub resource exhaustion7.1CISA ADP v3.10.3%2025-10-20
CVE-2025-55086Eclipse Foundation NextX Duo out-of-bounds read6.3CNA v4.00.4%2025-10-20Fix
CVE-2025-54957Dolby UDC DD+ decoder out-of-bounds write9.8CISA ADP v3.11.6%2025-10-20Exploit codeKCVFix
CVE-2025-54764Arm mbed TLS timing side channel6.2CISA ADP v3.10.2%2025-10-20Fix
CVE-2025-48025Samsung Exynos 980 improper access control4.3CISA ADP v3.10.3%2025-10-20Fix
CVE-2025-47902Microchip TimeProvider 4100 SQL injection in web resource7.1CNA v4.00.4%2025-10-20Fix
CVE-2025-47901Microchip TimeProvider 4100 RCE on restore configuration password8.9CNA v4.01.4%2025-10-20Fix
CVE-2025-47900Microchip TimeProvider 4100 RCE on backup configuration password8.9CNA v4.01.4%2025-10-20Fix
CVE-2025-41390Truffle Security TruffleHog git functionality arbitrary code execution7.8CNA v3.10.3%2025-10-20
CVE-2025-41028SQL injection in Epsilon RH9.3CNA v4.00.5%2025-10-20
CVE-2025-40017Linux kernel iris memory leak–0.2%2025-10-20Fix
CVE-2025-40016Linux kernel UVC video driver vulnerability–0.3%2025-10-20Fix
CVE-2025-40015Linux kernel STM32 CSI driver vulnerability–0.2%2025-10-20Fix
CVE-2025-40013Linux kernel audioreach null pointer dereference–0.3%2025-10-20Fix
CVE-2025-40012Linux kernel SMC socket receive splice use-after-free7.8CNA v3.10.2%2025-10-20Fix
CVE-2025-40011Linux kernel gma500 HDMI driver null pointer dereference–0.3%2025-10-20Fix
CVE-2025-40010Linux kernel AFS client server handling null pointer dereference–0.2%2025-10-20Fix
CVE-2025-40009Linux kernel pagemap scan ioctl null pointer dereference–0.2%2025-10-20Fix
CVE-2025-40008Linux kernel KMSAN shadow memory handling vulnerability–0.2%2025-10-20Fix
CVE-2025-40007Linux kernel netfs subsystem vulnerability–0.2%2025-10-20Fix
CVE-2025-40006Linux kernel hugetlb subsystem vulnerability7.8CNA v3.10.2%2025-10-20Fix
CVE-2025-40005Linux kernel Cadence QuadSPI driver vulnerability5.5v3.10.2%2025-10-20Fix
CVE-2025-40004Linux kernel 9p USB transport driver out-of-bounds write–0.3%2025-10-20Fix
CVE-2025-31342Galaxy Software Services Vitals ESP Forum module unrestricted upload of file with dangerous type9.3CNA v4.00.5%2025-10-20
CVE-2025-26782Samsung Exynos 980 denial of service7.5CISA ADP v3.10.6%2025-10-20Fix
CVE-2025-26781Samsung Exynos 980 denial of service7.5CISA ADP v3.10.6%2025-10-20Fix
CVE-2025-12001Azure Access Technology BLU-IC2 incorrect Content-Type header10.0CNA v4.00.2%2025-10-20
CVE-2025-11979MongoDB Server query planner use-after-free5.3CNA v3.10.3%2025-10-20Fix
CVE-2025-11948Excellent Infotek｜Document Management System arbitrary file upload9.3CNA v4.01.0%2025-10-20Fix
CVE-2025-11680Out-of-bounds write in libwebsockets PNG parsing5.9CNA v4.00.4%2025-10-20Fix
CVE-2025-11679Out-of-bounds read in libwebsockets PNG parsing5.9CNA v4.00.4%2025-10-20Fix
CVE-2025-11678warmcat libwebsocket stack-based buffer overflow in libwebsockets DNS response parsing7.5CNA v4.00.3%2025-10-20Fix
CVE-2025-11677warmcat libwebsockets use-after-free6.3CNA v4.00.4%2025-10-20Fix
CVE-2025-11536Element Pack Addons for Elementor WordPress plugin blind server-side request forgery5.0CNA v3.10.2%2025-10-20Fix
CVE-2025-10678Admin with default credentials in NetBird VPN9.3CNA v4.00.4%2025-10-20Fix
CVE-2025-9574ABB ALS-mini-s4 IP missing authentication9.9CNA v4.00.8%2025-10-20
CVE-2025-8884IDOR in VHS Electronic Software's ACE Center5.5CNA v3.10.2%2025-10-20Fix
CVE-2025-8349Cross-site scripting (XSS) stored in Tawk Live Chat5.3CNA v4.00.5%2025-10-20
CVE-2025-8053Insufficient access control vulnerability has been discovered in OpenText Flipper1.0CNA v4.00.3%2025-10-20Fix
CVE-2025-8052HQL injection vulnerability has been discovered in OpenText Flipper1.0CNA v4.00.4%2025-10-20Fix
CVE-2025-8051Path traversal validation vulnerability has been discovered in OpenText Flipper5.3CNA v4.00.4%2025-10-20Fix
CVE-2025-8049Insufficient access control vulnerability has been discovered in OpenText Flipper2.3CNA v4.00.3%2025-10-20Fix
CVE-2025-8048External Control of file path vulnerability has been discovered on Openext Flipper5.3CNA v4.00.3%2025-10-20Fix
CVE-2025-6515oatpp-mcp SSE session id generation insufficient randomness6.8CNA v3.10.4%2025-10-20
CVE-2025-5517ABB Terra AC wallbox (UL40/80A) heap memory corruption6.1CNA v4.00.3%2025-10-20Fix
CVE-2025-3465ABB CoreSense™ HM path traversal8.2CNA v4.00.2%2025-10-20Fix
CVE-2025-62672boyns rplay resource exhaustion5.3CNA v3.10.6%2025-10-19Fix
CVE-2025-11947bftpd Configuration file options.c expand_groups heap-based overflow2.0CNA v4.00.2%2025-10-19
CVE-2025-11946LogicalDOC Community Edition Add Contact frontend.jsp cross-site scripting5.4NVD v3.10.4%2025-10-19
CVE-2025-11945toeverything AFFiNE Avatar Upload Image endpoint cross-site scripting5.1CNA v4.00.3%2025-10-19
CVE-2025-11944givanz Vvveb Raw SQL import.php import SQL injection7.2NVD v3.10.6%2025-10-19
CVE-2025-1194370mai X200 HTTP web server default credentials9.8NVD v3.10.7%2025-10-19
CVE-2025-1194270mai X200 Pairing missing authentication9.8NVD v3.11.1%2025-10-19
CVE-2025-11941e107 CMS Avatar image.php path traversal8.1NVD v3.10.9%2025-10-19
CVE-2025-11940LibreWolf Installer setup.nsi uncontrolled search path7.3CNA v4.00.2%2025-10-19Fix
CVE-2025-11939ChurchCRM Backup Restore RestoreJob.php path traversal7.2v3.11.0%2025-10-19
CVE-2025-11938ChurchCRM setup.php deserialization8.1v3.10.7%2025-10-19
CVE-2025-62671The Wikimedia Foundation Mediawiki stored XSS through wikitext in Cargo6.9CNA v4.00.5%2025-10-18Fix
CVE-2025-62670The Wikimedia Foundation Mediawiki stored XSS through a system message in FlexDiagrams6.9CNA v4.00.5%2025-10-18
CVE-2025-62669The Wikimedia Foundation Mediawiki information disclosure6.9CNA v4.00.5%2025-10-18Fix
CVE-2025-62668The Wikimedia Foundation Mediawiki insufficient permission checks in action=growthsetmentor6.9CNA v4.00.4%2025-10-18Fix
CVE-2025-62667The Wikimedia Foundation Mediawiki stored XSS through article extracts in GrowthExperiments6.9CNA v4.00.4%2025-10-18Fix
CVE-2025-62666The Wikimedia Foundation Mediawiki DoS vector through the cirrusbuilddoc query API6.9CNA v4.00.4%2025-10-18Fix
CVE-2025-62665Wikimedia Foundation Mediawiki stored XSS through system messages in Skin:BlueSky6.9CNA v4.00.4%2025-10-18Fix
CVE-2025-62664The Wikimedia Foundation Mediawiki stored XSS through a system message in ImageRating6.9CNA v4.00.4%2025-10-18Fix
CVE-2025-62663The Wikimedia Foundation Mediawiki stored XSS through a system message in UploadWizard6.9CNA v4.00.5%2025-10-18Fix
CVE-2025-62662The Wikimedia Foundation Mediawiki stored XSS through system messages in AdvancedSearch6.9CNA v4.00.5%2025-10-18Fix
CVE-2025-47410Apache Geode: CSRF attacks8.8CISA ADP v3.10.4%2025-10-18Fix
CVE-2025-40003Linux kernel mscc ocelot Ethernet driver use-after-free–0.2%2025-10-18Fix
CVE-2025-40002Linux kernel thunderbolt use-after-free–0.3%2025-10-18Fix
CVE-2025-40001Linux kernel mvsas SAS/SATA driver use-after-free–0.3%2025-10-18Fix
CVE-2025-11937The Wikimedia Foundation Mediawiki stored XSS through a system message in SecurePoll6.9CNA v4.00.4%2025-10-18
CVE-2025-11926Related Posts Lite WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.3%2025-10-18Exploit code
CVE-2025-11857XX2WP Integration Tools WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-10-18Fix
CVE-2025-11742WPC Smart Wishlist for WooCommerce WordPress plugin unauthorized access4.3CNA v3.10.3%2025-10-18Fix
CVE-2025-11741WPC Smart Quick View for WooCommerce WordPress plugin information disclosure5.3CNA v3.10.3%2025-10-18Fix
CVE-2025-11738Media Library Assistant WordPress plugin unauthenticated limited file read5.3CNA v3.10.4%2025-10-18Fix
CVE-2025-11703WP Go Maps (formerly WP Google Maps) WordPress plugin unauthenticated cache poisoning5.3CNA v3.10.2%2025-10-18Fix
CVE-2025-11691PPOM Product Addons and Custom Fields for WooCommerce WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-10-18Fix
CVE-2025-11519Optimole WordPress plugin insecure direct object reference4.3CNA v3.10.3%2025-10-18Fix
CVE-2025-11517StellarWP Event Tickets and Registration free order endpoint insecure direct object reference7.5CNA v3.10.4%2025-10-18Fix
CVE-2025-11510FileBird WordPress plugin improper authorization to authenticated (Author+) settings reset4.3CNA v3.10.3%2025-10-18Fix
CVE-2025-11391Themeisle PPOM image cropper unrestricted file upload9.8CNA v3.11.0%2025-10-18Exploit codeFix
CVE-2025-11378ShortPixel Image Optimizer WordPress plugin authenticated (Contributor+) settings Import/Export5.4CNA v3.10.3%2025-10-18Fix
CVE-2025-11372LearnPress WordPress LMS plugin missing authorization to unauthenticated Database Table manipulation6.5CNA v3.10.5%2025-10-18Fix
CVE-2025-11361Essential Blocks WordPress plugin authenticated (Author+) server-side request forgery6.4CNA v3.10.3%2025-10-18Fix
CVE-2025-11270Gutenberg Essential Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-10-18Fix
CVE-2025-11256Kognetiks Chatbot WordPress plugin unauthorized access5.3CNA v3.10.4%2025-10-18Fix
CVE-2025-10750PowerBI Embed Reports WordPress plugin unauthenticated sensitive information disclosure5.3CNA v3.10.5%2025-10-18Fix
CVE-2025-10187GSpeech TTS WordPress Text To Speech plugin authenticated (Admin+) SQL injection4.9CNA v3.10.4%2025-10-18Fix
CVE-2025-10006WPBakery Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4NVD v3.10.2%2025-10-18Fix
CVE-2025-9890Theme Editor WordPress plugin cross-site request forgery to remote code execution8.8CNA v3.10.4%2025-10-18Fix
CVE-2025-9562Redirection for Contact Form 7 WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-10-18Fix
CVE-2025-5555Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow8.5CNA v4.00.2%2025-10-18
CVE-2025-62655The Wikimedia Foundation Mediawiki SQL injection in Cargo via Special:CargoExport2.1CNA v4.00.3%2025-10-17
CVE-2025-62654Stored XSS through system messages in QuizGame2.0CNA v4.00.3%2025-10-17
CVE-2025-62653Stored XSS through system messages in PollNY2.0CNA v4.00.3%2025-10-17
CVE-2025-62652Stored XSS in WebAuthn key name5.8CNA v4.00.4%2025-10-17
CVE-2025-62651Restaurant Brands International assistant platform incorrect authorization5.8NVD v3.10.4%2025-10-17Fix
CVE-2025-62650Restaurant Brands International assistant platform client-side authentication9.9NVD v3.10.5%2025-10-17Fix
CVE-2025-62649Restaurant Brands International assistant platform client-side authentication5.8NVD v3.10.5%2025-10-17Fix
CVE-2025-62648Restaurant Brands International assistant platform incorrect authorization5.8NVD v3.10.4%2025-10-17Fix
CVE-2025-62647Restaurant Brands International assistant platform incorrect authorization5.8NVD v3.10.4%2025-10-17Fix
CVE-2025-62646Restaurant Brands International assistant platform incorrect resource transfer7.7NVD v3.10.5%2025-10-17Fix
CVE-2025-62645Restaurant Brands International assistant platform incorrect privilege assignment9.9CNA v3.10.7%2025-10-17Fix
CVE-2025-62644Restaurant Brands International assistant platform personal information exposure7.7NVD v3.10.5%2025-10-17Fix
CVE-2025-62643Restaurant Brands International assistant platform cleartext transmission of sensitive information8.6NVD v3.10.3%2025-10-17Fix
CVE-2025-62642Restaurant Brands International assistant platform missing authorization8.6NVD v3.10.5%2025-10-17Fix
CVE-2025-62515marsupialtail quokka remote code execution by Pickle deserialization via FlightServer in pyquokka9.8CNA v3.10.8%2025-10-17
CVE-2025-62511zheny-creator YtGrabber-TUI yt-grabber-tui local arbitrary file overwrite6.3CNA v3.10.1%2025-10-17Fix
CVE-2025-62508StarCitizenTools mediawiki-skins-Citizen sticky header button messages stored cross-site scripting6.5CNA v3.10.4%2025-10-17Fix
CVE-2025-62505SSRF in lobehub/lobe-chat with native web fetch module3.0CNA v3.10.3%2025-10-17Fix
CVE-2025-62430ClipBucket v5 stored XSS via video/photo fields5.4CNA v3.10.3%2025-10-17Fix
CVE-2025-62424ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write6.7CNA v3.10.9%2025-10-17Fix
CVE-2025-62422DataEase SQL injection8.7CNA v4.00.5%2025-10-17Fix
CVE-2025-62421DataEase vulnerable to stored cross-site scripting via file upload bypass5.5CNA v4.00.3%2025-10-17Fix
CVE-2025-62420DataEase vulnerable to remote code execution via H2 JDBC driver bypass8.2CNA v4.01.0%2025-10-17Fix
CVE-2025-62419DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration8.2CNA v4.00.4%2025-10-17Fix
CVE-2025-62356Qodo Gen all versions of the Qodo path traversal7.5CNA v3.10.6%2025-10-17
CVE-2025-62353Windsurf all versions of the path traversal9.8CNA v3.10.6%2025-10-17
CVE-2025-62171ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems5.9CNA v3.10.8%2025-10-17Fix
CVE-2025-62168Squid vulnerable to information disclosure via authentication credential leakage in error handling10.0CNA v3.163.4%2025-10-17NucleiExploit codeFix
CVE-2025-60514Tillywork query builder helper SQL injection6.5CISA ADP v3.10.3%2025-10-17
CVE-2025-60361radare2 bochs_open function memory leak3.3CISA ADP v3.10.2%2025-10-17Fix
CVE-2025-60360radare2 r2r_subprocess_init function memory leak5.5CISA ADP v3.10.2%2025-10-17Fix
CVE-2025-60359radare2 r_bin_object_new function memory leak5.5CISA ADP v3.10.2%2025-10-17Fix
CVE-2025-60279Illia Cloud illia-Builder server-side request forgery9.6CISA ADP v3.10.4%2025-10-17
CVE-2025-59043OpenBao vulnerable to denial of service via malicious JSON request processing7.5CNA v3.10.7%2025-10-17Fix
CVE-2025-58747Dify MCP OAuth Flow vulnerable to XSS2.0CNA v4.05.7%2025-10-17
CVE-2025-57567PluXml CMS theme editor A remote code execution9.1CISA ADP v3.10.9%2025-10-17
CVE-2025-57164FlowiseAI Pre-Auth arbitrary code execution6.5CISA ADP v3.10.6%2025-10-17Fix
CVE-2025-56320CobbleStone Enterprise Contract Management Portal chat box stored cross-site scripting5.4CISA ADP v3.10.4%2025-10-17
CVE-2025-56316MCMS vulnerable SQL injection via the content_title parameter9.8CISA ADP v3.10.6%2025-10-17Fix
CVE-2025-56221Ascertia Signinghub missing brute-force protection9.8CISA ADP v3.10.6%2025-10-17
CVE-2025-56218Ascertia Signinghub An arbitrary file upload9.8CISA ADP v3.10.6%2025-10-17
CVE-2025-55100Eclipse Foundation USBX potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func2.4CNA v4.00.6%2025-10-17Fix
CVE-2025-55099Eclipse Foundation USBX audio alternate setting parser out-of-bounds read2.4CNA v4.00.4%2025-10-17Fix
CVE-2025-55098Eclipse Foundation USBX potential out-of-bounds read in _ux_host_class_audio_device_type_get1.0CNA v4.00.3%2025-10-17Fix
CVE-2025-55097Eclipse Foundation USBX potential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get2.4CNA v4.00.3%2025-10-17Fix
CVE-2025-55096Eclipse Foundation USBX HID report descriptor parser out-of-bounds read2.1CNA v4.00.2%2025-10-17Fix
CVE-2025-55094Eclipse Foundation NetX Duo potential out-of-bounds read in _nx_icmpv6_validate_options6.9CNA v4.00.4%2025-10-17Fix
CVE-2025-55093Eclipse Foundation NetX Duo DHCP unicast packet handling vulnerability6.9CNA v4.00.3%2025-10-17Fix
CVE-2025-55092Eclipse Foundation NetX Duo potential out of bound read in _nx_ipv4_option_process6.9CNA v4.00.3%2025-10-17Fix
CVE-2025-55087Eclipse Foundation NextX Duo out-of-bounds read6.3CNA v4.00.5%2025-10-17Fix
CVE-2025-55085Eclipse Foundation NetX Duo Web HTTP client: Unchecked Server-Side Malicious Packet issue8.8CNA v4.00.6%2025-10-17Fix
CVE-2025-49655Keras framework vulnerable to deserialization of untrusted data9.8CNA v3.10.8%2025-10-17Fix
CVE-2025-48087Memberlite Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-10-17
CVE-2025-48044ash-project ash authorization bypass when bypass policy condition evaluates to true8.6CNA v4.00.7%2025-10-17Fix
CVE-2025-34282ThingsBoard SVG Image SSRF9.1v3.11.8%2025-10-17Exploit codeFix
CVE-2025-34281Stored cross-site scripting (XSS) in ThingsBoard5.4v3.10.4%2025-10-17Fix
CVE-2025-26625git-lfs git LFS may write to arbitrary files via crafted symlinks8.6CNA v4.01.1%2025-10-17Fix
CVE-2025-11925Azure Access Technology BLU-IC2 incorrect Content-Type header10.0CNA v4.00.3%2025-10-17
CVE-2025-11914Shenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversal7.5NVD v3.10.9%2025-10-17
CVE-2025-11913Shenzhen Ruiming Technology Streamax Crocus Service.do download path traversal6.5NVD v3.10.9%2025-10-17
CVE-2025-11912Shenzhen Ruiming Technology Streamax Crocus DeviceState.do Query SQL injection8.8NVD v3.10.5%2025-10-17
CVE-2025-11911Shenzhen Ruiming Technology Streamax Crocus DeviceFault.do Query SQL injection8.8NVD v3.10.5%2025-10-17
CVE-2025-11910Shenzhen Ruiming Technology Streamax Crocus MemoryState.do query SQL injection8.8NVD v3.10.5%2025-10-17
CVE-2025-11909Shenzhen Ruiming Technology Streamax Crocus RepairRecord.do queryLast SQL injection8.8NVD v3.10.5%2025-10-17
CVE-2025-11908Shenzhen Ruiming Technology Streamax Crocus FileDir.do uploadFile unrestricted upload8.8NVD v3.10.5%2025-10-17
CVE-2025-11905yanyutao0402 ChanCMS gather.js getArticle code injection8.8NVD v3.10.8%2025-10-17
CVE-2025-11904yanyutao0402 ChanCMS hasUse SQL injection7.2NVD v3.10.6%2025-10-17
CVE-2025-11903yanyutao0402 ChanCMS update SQL injection7.2NVD v3.10.6%2025-10-17
CVE-2025-11902yanyutao0402 ChanCMS findField SQL injection7.2NVD v3.10.6%2025-10-17
CVE-2025-11900HGiga｜iSherlock OS command injection9.3CNA v4.01.8%2025-10-17Fix
CVE-2025-11899Flowring Technology｜Agentflow use of hard-coded cryptographic key9.2CNA v4.00.7%2025-10-17Fix
CVE-2025-11898Flowring Technology｜Agentflow arbitrary file reading through path traversal8.7CNA v4.00.8%2025-10-17Fix
CVE-2025-11895Binary MLM Plan WordPress plugin authenticated (Subscriber+) insecure direct object reference4.3CNA v3.10.3%2025-10-17
CVE-2025-11849Mammoth is vulnerable to directory traversal6.4CNA v4.01.0%2025-10-17Fix
CVE-2025-8414silabs.com Simplicity SDK zigbee Green Power host buffer overflow9.4CNA v4.00.3%2025-10-17Fix
CVE-2025-6950Moxa EDR-G9010 Series hard-coded credentials9.9CNA v4.00.6%2025-10-17Fix
CVE-2025-6949Moxa EDR-G9010 Series execution with unnecessary privileges9.3CNA v4.00.5%2025-10-17Fix
CVE-2025-6894Moxa EDR-G9010 Series execution with unnecessary privileges5.3CNA v4.00.6%2025-10-17Fix
CVE-2025-6893Moxa EDR-G9010 Series execution with unnecessary privileges9.3CNA v4.00.7%2025-10-17Fix
CVE-2025-6892Moxa EDR-G9010 Series incorrect authorization8.7CNA v4.00.5%2025-10-17Fix
CVE-2025-62586OPEXUS FOIAXpress unauthenticated administrator password reset8.9CNA v4.00.7%2025-10-16Fix
CVE-2025-62585NAVER Whale browser improperly implemented security check7.5CISA ADP v3.10.4%2025-10-16Fix
CVE-2025-62584NAVER Whale browser origin validation error7.5CISA ADP v3.10.2%2025-10-16Fix
CVE-2025-62583NAVER Whale browser improperly implemented security check9.8CISA ADP v3.10.5%2025-10-16Fix
CVE-2025-62580ASDA-Soft stack-based buffer overflow7.8CNA v3.10.2%2025-10-16Fix
CVE-2025-62579ASDA-Soft stack-based buffer overflow7.8CNA v3.10.2%2025-10-16Fix
CVE-2025-62506MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS8.1CNA v3.10.6%2025-10-16Exploit codeFix
CVE-2025-62504Envoy Lua filter use-after-free when oversized rewritten response body causes crash6.5CNA v3.10.4%2025-10-16Fix
CVE-2025-62496Integer overflow in js_bigint_from_string in QuickJS8.8NVD v3.10.5%2025-10-16Fix
CVE-2025-62495Type confusion in string addition in QuickJS8.8NVD v3.10.5%2025-10-16Fix
CVE-2025-62494Type confusion in string addition in QuickJS8.8NVD v3.10.5%2025-10-16Fix
CVE-2025-62493Heap out-of-bounds read in js_bigint_to_string1 in QuickJS6.5NVD v3.10.4%2025-10-16Fix
CVE-2025-62492Heap out-of-bounds read in js_typed_array_indexOf in QuickJS6.5NVD v3.10.4%2025-10-16Fix
CVE-2025-62491QuickJS A use-after-free8.8NVD v3.10.4%2025-10-16Fix
CVE-2025-62490QuickJS js_print_object function use-after-free8.8NVD v3.10.4%2025-10-16Fix
CVE-2025-62428Drawing-Captcha APP host header injection in `/register` and `/confirm-email` endpoints8.8CNA v4.00.5%2025-10-16Fix
CVE-2025-62427Server-side request forgery (SSRF) in Angular SSR8.7CNA v4.00.4%2025-10-16Fix
CVE-2025-62425Element Matrix Authentication Service account password change unverified password change8.3CNA v3.10.4%2025-10-16
CVE-2025-62423ClipBucket V5 blind SQL injection in the Admin Panel6.7CNA v3.10.5%2025-10-16
CVE-2025-62418Bagisto cross-site scripting (XSS) in TinyMCE Image Upload (SVG)6.9CNA v3.10.3%2025-10-16Fix
CVE-2025-62417Bagisto CSV formula injection in Create New Product7.1CNA v4.00.4%2025-10-16Fix
CVE-2025-62416Bagisto server side template injection (SSTI) in Product Description5.1CNA v3.10.4%2025-10-16Fix
CVE-2025-62415Bagisto cross-site scripting (XSS) in TinyMCE Image Upload (HTML)6.9CNA v3.10.3%2025-10-16Fix
CVE-2025-62414Webkul Bagisto create customer form vulnerability6.9CNA v3.10.3%2025-10-16Fix
CVE-2025-62413MQTTX vulnerable to cross-site scripting via improper message payload rendering6.1CNA v3.10.3%2025-10-16
CVE-2025-62412LibreNMS alert-rules cross-site scripting3.8CNA v3.10.3%2025-10-16Fix
CVE-2025-62411Stored XSS in Alert Transport name field in LibreNMS5.5CNA v3.112.7%2025-10-16Fix
CVE-2025-62409Envoy allows large requests and responses to cause TCP connection pool crash6.6CNA v4.00.5%2025-10-16Fix
CVE-2025-62407Frappe has an open redirect on Login page6.1CNA v3.10.3%2025-10-16Fix
CVE-2025-61924PrestaShop Checkout Target PayPal merchant account hijacking from backoffice3.8CNA v3.10.3%2025-10-16Fix
CVE-2025-61923PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure4.1CNA v3.10.9%2025-10-16Fix
CVE-2025-61922PrestaShop Checkout Express Checkout feature improper authentication9.1CNA v3.10.5%2025-10-16Exploit codeFix
CVE-2025-61909Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user4.0CNA v4.00.2%2025-10-16Fix
CVE-2025-61908Icinga 2 denial of service (DoS) by Dereferencing Invalid Reference7.1CNA v4.00.5%2025-10-16Fix
CVE-2025-61907Icinga 2 API users could access restricted values in filter expressions7.1CNA v4.00.4%2025-10-16Fix
CVE-2025-61789Icinga DB Web hidden/protected custom variables are prone to filter enumeration5.3CNA v3.10.4%2025-10-16Fix
CVE-2025-61581Apache Traffic Control: ReDoS issue in Traffic Router configuration7.5CISA ADP v3.10.7%2025-10-16Fix
CVE-2025-61554BitVisor VirtIO network device emulation division by zero5.5CISA ADP v3.10.2%2025-10-16
CVE-2025-61553BitVisor VirtIO network device emulation out-of-bounds write8.2CISA ADP v3.10.2%2025-10-16
CVE-2025-61543password reset functionality of CraftMyCMS host header injection7.1CISA ADP v3.10.3%2025-10-16
CVE-2025-61541Webmin host header injection7.1CISA ADP v3.10.5%2025-10-16
CVE-2025-61540Myupb Ultimate PHP Board SQL injection6.5CISA ADP v3.10.3%2025-10-16
CVE-2025-61539Myupb Ultimate PHP Board cross-site scripting6.1CISA ADP v3.10.3%2025-10-16
CVE-2025-61536FelixRiddle dev-jobs-handlebars password reset link generation unverified password change8.2CISA ADP v3.10.4%2025-10-16
CVE-2025-61514SageMath An arbitrary file upload6.5CISA ADP v3.10.4%2025-10-16
CVE-2025-61330H3C Magic root account vulnerability6.5CISA ADP v3.10.3%2025-10-16
CVE-2025-60855Reolink Video Doorbell WiFi firmware update verification vulnerability5.1CISA ADP v3.10.1%2025-10-16
CVE-2025-60641Vfront mexcel.php vulnerability6.5CISA ADP v3.10.4%2025-10-16
CVE-2025-60639gsigel14 ATLAS-EPIC commit f29312c hard-coded credentials6.5CISA ADP v3.10.3%2025-10-16
CVE-2025-60358radare2 _load_relocations function memory leak5.5CISA ADP v3.10.2%2025-10-16Fix
CVE-2025-58778Ruijie Networks RG-EST300 hidden functionality8.6CNA v4.00.6%2025-10-16
CVE-2025-58426NEOJAPAN desknet's NEO hard-coded cryptographic key5.3CNA v4.00.3%2025-10-16
CVE-2025-58115NEOJAPAN ChatLuck Guest User Sign-up cross-site scripting5.3CNA v4.00.3%2025-10-16
CVE-2025-58079NEOJAPAN desknet's NEO AppSuite unprotected alternate path5.3CNA v4.00.3%2025-10-16
CVE-2025-58075Arbitrary Mattermost Team can be joined by manipulating the SAML RelayState8.1CNA v3.10.3%2025-10-16Fix
CVE-2025-58073Arbitrary Mattermost Team can be joined by manipulating the OAuth state8.1CNA v3.10.4%2025-10-16Fix
CVE-2025-58051Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table6.5CNA v3.10.5%2025-10-16Fix
CVE-2025-56700Base Digitale Group Centrax Open PSIM web app SQL injection5.4CISA ADP v3.10.3%2025-10-16
CVE-2025-56699Base Digitale Group Centrax Open PSIM cmd component SQL injection5.4CISA ADP v3.10.3%2025-10-16
CVE-2025-55091Eclipse Foundation NetX Duo potential out of bound read in _nx_ip_packet_receive6.9CNA v4.00.4%2025-10-16Fix
CVE-2025-55090Potential out of bound read issue in _nx_ipv4_packet_receive in NetX Duo6.9CNA v4.00.4%2025-10-16Fix
CVE-2025-55089Eclipse ThreadX FileX RAM disk driver buffer overflow9.2CNA v4.00.5%2025-10-16Fix
CVE-2025-55084Eclipse Foundation NetX Duo TLS ClientHello version extension out-of-bounds read6.9CNA v4.00.3%2025-10-16Fix
CVE-2025-55072NEOJAPAN desknet's NEO stored cross-site scripting4.8CNA v4.00.3%2025-10-16
CVE-2025-55035Mattermost Desktop DoS when user has basic authentication server configured6.1CNA v3.10.3%2025-10-16Fix
CVE-2025-54859NEOJAPAN desknet's NEO stored cross-site scripting4.6CNA v4.00.3%2025-10-16
CVE-2025-54760NEOJAPAN desknet's NEO stored cross-site scripting4.8CNA v4.00.3%2025-10-16
CVE-2025-54658Fortinet FortiDLP path traversal7.2CNA v3.10.2%2025-10-16Fix
CVE-2025-54539Apache ActiveMQ NMS AMQP Client: Deserialization of untrusted data9.8CISA ADP v3.12.1%2025-10-16Fix
CVE-2025-54499Mattermost insecure string comparison enables timing attacks3.1CNA v3.10.3%2025-10-16Fix
CVE-2025-54461NEOJAPAN ChatLuck Invitation of Guest Users insufficient access control granularity6.9CNA v4.00.3%2025-10-16
CVE-2025-53951Fortinet FortiDLP path traversal4.9CNA v3.10.2%2025-10-16Fix
CVE-2025-53950Fortinet FortiDLP personal information exposure5.1CNA v3.10.2%2025-10-16Fix
CVE-2025-53858NEOJAPAN ChatLuck Chat Rooms cross-site scripting4.8CNA v4.00.2%2025-10-16
CVE-2025-53092Strapi core vulnerable to sensitive data exposure via CORS misconfiguration6.5CNA v3.10.3%2025-10-16Fix
CVE-2025-52583NEOJAPAN desknet's Web Server reflected cross-site scripting5.1CNA v4.00.3%2025-10-16
CVE-2025-46752Fortinet FortiDLP sensitive information in log files4.2CNA v3.10.2%2025-10-16Fix
CVE-2025-41443Mattermost guest user can discover active public channels4.3CNA v3.10.3%2025-10-16Fix
CVE-2025-41410Mattermost slack import bypasses email verification for team access controls5.4CNA v3.10.3%2025-10-16Fix
CVE-2025-41254Spring Framework STOMP CSRF4.3CNA v3.10.3%2025-10-16Fix
CVE-2025-41253Spring Cloud Gateway Webflux SpEL injection vulnerability allowing Exposure of Environment variables7.5CNA v3.10.5%2025-10-16Fix
CVE-2025-41021Stored cross-site scripting (XSS) vulnerability in Sergestec's Exito5.4NVD v3.10.3%2025-10-16
CVE-2025-41020Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito7.5NVD v3.10.3%2025-10-16
CVE-2025-41019SQL injection vulnerability in Sergestec's Exito9.3CNA v4.00.4%2025-10-16
CVE-2025-41018SQL injection vulnerability in Sergestec's Exito9.8NVD v3.10.5%2025-10-16
CVE-2025-36128IBM MQ denial of service7.5CNA v3.10.5%2025-10-16Fix
CVE-2025-36002IBM Sterling B2B Integrator information disclosure5.5CNA v3.10.2%2025-10-16Fix
CVE-2025-34519Ilevia EVE X1 Server.eden Insecure Hashing Algorithm7.5NVD v3.10.3%2025-10-16
CVE-2025-34518Ilevia EVE X1 Server.eden relative path traversal7.5NVD v3.10.7%2025-10-16Fix
CVE-2025-34517Ilevia EVE X1 Server.eden absolute path traversal7.5NVD v3.10.7%2025-10-16Fix
CVE-2025-34516Ilevia EVE X1 Server.eden use of default credentials9.8NVD v3.10.6%2025-10-16
CVE-2025-34515Ilevia EVE X1 Server.eden Root privilege escalation9.8NVD v3.18.0%2025-10-16
CVE-2025-34514Ilevia EVE X1 Server.eden authenticated command injection8.8NVD v3.12.0%2025-10-16
CVE-2025-34513Ilevia EVE X1 Server.eden unauthenticated command injection9.8NVD v3.17.6%2025-10-16Emerging ThreatsFix
CVE-2025-34512Ilevia EVE X1 Server.eden reflected XSS6.1NVD v3.10.4%2025-10-16Fix
CVE-2025-34255D-Link Nuclias Connect Forgot Password Account Enumeration5.3NVD v3.11.0%2025-10-16Fix
CVE-2025-34254D-Link Nuclias Connect Login Account Enumeration5.3NVD v3.11.0%2025-10-16Fix
CVE-2025-34253D-Link Nuclias Connect stored cross-site scripting (XSS)5.4NVD v3.10.5%2025-10-16Fix
CVE-2025-25298Missing Maximum Password Length Validation in Strapi Password Hashing6.3CNA v4.00.4%2025-10-16Fix
CVE-2025-24833NEOJAPAN desknet's NEO stored cross-site scripting4.8CNA v4.00.3%2025-10-16
CVE-2025-22381Aggie password reset functionality host header injection8.2CISA ADP v3.10.6%2025-10-16
CVE-2025-11896Stack overflow in Xpdf due to object loop in PDF CMap2.1CNA v4.00.2%2025-10-16Fix
CVE-2025-11864NucleoidAI Nucleoid Outbound request cluster.ts extension.apply server-side request forgery6.9CNA v4.00.5%2025-10-16
CVE-2025-11853Sismics Teedy API endpoint file access control8.1v3.10.5%2025-10-16
CVE-2025-11852Apeman ID71 ONVIF service device_service missing authentication6.9CNA v4.00.6%2025-10-16
CVE-2025-11851Apeman ID71 set_alias.cgi cross-site scripting5.1CNA v4.00.3%2025-10-16
CVE-2025-11842Shazwazza Smidge Bundle path traversal5.3CNA v4.00.4%2025-10-16Fix
CVE-2025-11840GNU Binutils ldmisc.c vfinfo out-of-bounds5.5NVD v3.10.3%2025-10-16Fix
CVE-2025-11839GNU Binutils prdbg.c tg_tag_type return value5.5NVD v3.10.3%2025-10-16Fix
CVE-2025-11814Ultimate Addons for WPBakery Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-10-16Fix
CVE-2025-11683TODDR YAML::Syck tokenizer out-of-bounds read6.5CISA ADP v3.10.2%2025-10-16Fix
CVE-2025-11493Self-Update Verification Mechanism Process in ConnectWise Automate8.8CNA v3.10.2%2025-10-16Fix
CVE-2025-11492ConnectWise Automate HTTP Configuration and Encryption in Transit9.6CNA v3.10.2%2025-10-16Exploit codeFix
CVE-2025-10850Felan Framework WordPress plugin hard-coded credentials9.8CNA v3.10.6%2025-10-16Fix
CVE-2025-10849Felan Framework WordPress plugin unauthorized access5.3CNA v3.10.3%2025-10-16Fix
CVE-2025-10742Truelysell Core WordPress plugin unauthenticated arbitrary user password Change9.8CNA v3.10.5%2025-10-16Fix
CVE-2025-10706CridioStudio ClassifiedPro missing authorization8.8CNA v3.10.6%2025-10-16Fix
CVE-2025-10700Ally WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-10-16Fix
CVE-2025-10611Potential broken access control in multiple WSO2 Products via System REST APIs9.8CNA v3.10.8%2025-10-16Fix
CVE-2025-10545Mattermost guest user can add unauthorized team users to private channels3.1CNA v3.10.3%2025-10-16Fix
CVE-2025-9955Improper access control in WSO2 Enterprise Integrator Product5.7CNA v3.10.2%2025-10-16Fix
CVE-2025-9804Improper access control in multiple WSO2 Products9.6CNA v3.10.6%2025-10-16Fix
CVE-2025-9559Pegasystems Pega Platform insecure direct object reference6.5CNA v3.10.4%2025-10-16Fix
CVE-2025-9152Improper privilege management in multiple WSO2 API Manager via keymanager-operations DCR endpoint9.8CNA v3.10.7%2025-10-16Fix
CVE-2025-6338Qt There is an incomplete cleanup9.2CNA v4.00.4%2025-10-16Fix
CVE-2025-3930Lack of JWT Expiration after Log Out in Strapi6.3CNA v4.00.5%2025-10-16Fix
CVE-2025-0277HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)6.5CNA v3.10.3%2025-10-16Fix
CVE-2025-0276HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)6.5CNA v3.10.3%2025-10-16Fix
CVE-2025-0275HCL BigFix Mobile is affected by improper access control5.3CNA v3.10.3%2025-10-16Fix
CVE-2025-0274HCL BigFix Modern Client Management (MCM) is affected by improper access control5.3CNA v3.10.3%2025-10-16Fix
CVE-2025-62410capricorn86 happy-dom prototype pollution9.4CNA v4.00.4%2025-10-15Fix
CVE-2025-62382Frigate vulnerable to arbitrary file read via Export Thumbnail image_path parameter7.7CNA v3.10.4%2025-10-15Fix
CVE-2025-62381sveltekit-superforms prototype pollution in `parseFormData` function of `formData.js`8.3CNA v4.00.7%2025-10-15Fix
CVE-2025-62380Mailgen has HTML injection and XSS Filter Bypass in Plaintext Emails2.9CNA v4.00.5%2025-10-15Fix
CVE-2025-62379Open redirect in reflex-dev/reflex3.1CNA v3.10.3%2025-10-15Fix
CVE-2025-62378CommandKit exposes incorrect command name in context object for message command aliases6.1CNA v3.10.2%2025-10-15Fix
CVE-2025-62375go-witness Improper Verification of AWS EC2 Identity Documents6.9CNA v4.00.2%2025-10-15Fix
CVE-2025-62371OpenSearch Data Prepper plugins trusts all SSL certificates by default7.4CNA v3.10.2%2025-10-15Fix
CVE-2025-62370Alloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing7.5CNA v3.10.4%2025-10-15Fix
CVE-2025-61990F5 BIG-IP Traffic Management Microkernel double free8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-61974F5 BIG-IP client SSL profile memory leak8.7CNA v4.00.5%2025-10-15Fix
CVE-2025-61960F5 BIG-IP APM portal access null pointer dereference8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-61958F5 BIG-IP iHealth command vulnerability8.5CNA v4.00.4%2025-10-15Fix
CVE-2025-61955F5OS privilege escalation8.5CNA v4.00.2%2025-10-15Fix
CVE-2025-61951F5 BIG-IP DTLS virtual server out-of-bounds read8.7CNA v4.00.2%2025-10-15Fix
CVE-2025-61941Buffalo WXR9300BE6P series path traversal8.6CNA v4.00.5%2025-10-15
CVE-2025-61938BIG-IP Advanced WAF and ASM bd process vulnerability8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-61935F5 BIG-IP Advanced WAF and ASM bd process denial of service8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-61933BIG-IP APM cross-site scripting (XSS)5.1CNA v4.00.2%2025-10-15Fix
CVE-2025-61804Adobe Animate heap-based buffer overflow7.8CNA v3.10.3%2025-10-15Fix
CVE-2025-60016F5 BIG-IP SSL profile DH ECC Brainpool ciphers memory corruption8.7CNA v4.00.4%2025-10-15Fix
CVE-2025-60015F5OS out-of-bounds write6.9CNA v4.00.2%2025-10-15Fix
CVE-2025-60013F5OS-A FIPS HSM password vulnerability4.6CNA v4.00.2%2025-10-15Fix
CVE-2025-59781F5 BIG-IP DNS cache vulnerability8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-59778F5OS VELOS partition container network vulnerability7.7CNA v4.00.3%2025-10-15Fix
CVE-2025-59483BIG-IP Configuration utility and tmsh vulnerability8.5CNA v4.00.4%2025-10-15Fix
CVE-2025-59481BIG-IP iControl REST and tmsh vulnerability8.5CNA v4.00.4%2025-10-15Fix
CVE-2025-59478BIG-IP AFM DoS protection profile8.7CNA v4.00.4%2025-10-15Fix
CVE-2025-59419Netty netty-codec-smtp SMTP command injection vulnerability allowing Email Forgery5.5CNA v4.01.6%2025-10-15Fix
CVE-2025-59269BIG-IP Configuration utility XSS8.4CNA v4.00.3%2025-10-15Fix
CVE-2025-59268F5 BIG-IP Configuration utility information disclosure6.9CNA v4.00.4%2025-10-15Fix
CVE-2025-58474BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability6.9CNA v4.00.4%2025-10-15Fix
CVE-2025-58424F5 BIG-IP predictable identifiers6.3CNA v4.00.2%2025-10-15Fix
CVE-2025-58153F5 BIG-IP High-Speed Bridge improper locking8.2CNA v4.00.2%2025-10-15Fix
CVE-2025-58133Zoom Rooms Clients authentication bypass5.3CNA v3.10.3%2025-10-15Fix
CVE-2025-58132Zoom Clients for Windows command injection4.1CNA v3.11.8%2025-10-15Fix
CVE-2025-58120F5 BIG-IP Next HTTP/2 ingress null pointer dereference8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-58096F5 BIG-IP TMM checksum processing out-of-bounds write8.2CNA v4.00.3%2025-10-15Fix
CVE-2025-58071F5 BIG-IP IPsec uninitialized variable use8.7CNA v4.00.4%2025-10-15Fix
CVE-2025-57780F5OS privilege escalation8.5CNA v4.00.2%2025-10-15Fix
CVE-2025-56749Creativeitem Academy LMS hard-coded credentials9.4CISA ADP v3.10.5%2025-10-15
CVE-2025-56748Creativeitem Academy LMS weak password recovery6.4CISA ADP v3.10.2%2025-10-15
CVE-2025-56746Creativeitem Academy LMS session fixation2.2CISA ADP v3.10.2%2025-10-15
CVE-2025-55670F5 BIG-IP Next API denial of service7.1CNA v4.00.3%2025-10-15Fix
CVE-2025-55669F5 BIG-IP HTTP/2 profile vulnerability8.7CNA v4.00.4%2025-10-15Fix
CVE-2025-55083Eclipse Foundation NetX Duo TLS ClientHello PSK extension parsing out-of-bounds read6.9CNA v4.00.3%2025-10-15Fix
CVE-2025-55082Eclipse Foundation NetX Duo TLS ClientHello PSK length validation out-of-bounds read6.9CNA v4.00.3%2025-10-15Fix
CVE-2025-55081Eclipse Foundation NetX Duo potential out of bound read in _nx_secure_tls_process_clienthello6.9CNA v4.00.4%2025-10-15Fix
CVE-2025-55080Improper Parameter Check in ThreadX Syscall Implementation7.2CNA v4.00.1%2025-10-15Fix
CVE-2025-55079Eclipse Foundation ThreadX missing check for thread priority5.7CNA v4.00.2%2025-10-15Fix
CVE-2025-55039Apache Spark has inadequate encryption strength6.5CISA ADP v3.10.2%2025-10-15Fix
CVE-2025-55036F5 BIG-IP SSL Orchestrator explicit forward proxy out-of-bounds write8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-54858F5 BIG-IP Advanced WAF and ASM JSON content profile uncontrolled recursion8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-54854F5 BIG-IP APM OAuth access profile out-of-bounds read8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-54805F5 BIG-IP Next Traffic Management Microkernel memory leak6.0CNA v4.00.3%2025-10-15Fix
CVE-2025-54755F5 BIG-IP TMUI path traversal6.9CNA v4.01.2%2025-10-15Fix
CVE-2025-54479F5 BIG-IP Traffic Management Microkernel out-of-bounds write8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-54279Adobe Animate use-after-free7.8CNA v3.10.3%2025-10-15Fix
CVE-2025-54278Adobe Bridge heap-based buffer overflow5.5CNA v3.10.2%2025-10-15Fix
CVE-2025-54271Adobe Creative Cloud Desktop time-of-check time-of-use (TOCTOU) race condition5.6CNA v3.10.1%2025-10-15Fix
CVE-2025-54270Adobe Animate null pointer dereference5.5CNA v3.10.2%2025-10-15Fix
CVE-2025-54269Adobe Animate out-of-bounds read5.5CNA v3.10.2%2025-10-15Fix
CVE-2025-54268Adobe Bridge heap-based buffer overflow7.8CNA v3.10.3%2025-10-15Fix
CVE-2025-53868F5 BIG-IP SCP and SFTP appliance mode OS command injection8.5CNA v4.00.4%2025-10-15Fix
CVE-2025-53860F5OS-A FIPS hardware security module information disclosure5.6CNA v4.00.1%2025-10-15Fix
CVE-2025-53856F5 BIG-IP Traffic Management Microkernel vulnerability8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-53521F5 BIG-IP stack-based buffer overflow9.3CNA v4.02.3%2025-10-15KEVFix
CVE-2025-53474F5 BIG-IP iRules ILX::call buffer overflow8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-48008F5 BIG-IP Multipath TCP profile use-after-free8.7CNA v4.00.4%2025-10-15Fix
CVE-2025-47150F5OS SNMP request handling memory leak7.1CNA v4.00.4%2025-10-15Fix
CVE-2025-47148F5 BIG-IP SAML single logout handling vulnerability7.1CNA v4.00.4%2025-10-15Fix
CVE-2025-46706F5 BIG-IP iRules HTTP::respond command resource exhaustion8.7CNA v4.00.4%2025-10-15Fix
CVE-2025-43313Apple macOS logic flaw5.5CISA ADP v3.10.2%2025-10-15Fix
CVE-2025-43282Apple iPadOS double free5.5CISA ADP v3.10.2%2025-10-15Fix
CVE-2025-43281Apple macOS improper authentication7.8CISA ADP v3.10.1%2025-10-15Fix
CVE-2025-43280Apple iOS and iPadOS improper verification of communication source4.7CISA ADP v3.10.2%2025-10-15Fix
CVE-2025-41430F5 BIG-IP SSL Orchestrator resource exhaustion8.7CNA v4.00.3%2025-10-15Fix
CVE-2025-40000Linux kernel rtw89 Wi-Fi driver use-after-free8.8CNA v3.10.3%2025-10-15Fix
CVE-2025-39999Linux kernel blk-mq tag allocation double free–0.2%2025-10-15Fix
CVE-2025-39998Linux kernel SCSI target configfs buffer overflow7.1CNA v3.10.2%2025-10-15Fix
CVE-2025-39997Linux kernel usb-audio race condition–0.2%2025-10-15Fix
CVE-2025-39996Linux kernel b2c2 FlexCop PCI driver use-after-free–0.2%2025-10-15Fix
CVE-2025-39995Linux kernel tc358743 use-after-free–0.2%2025-10-15Fix
CVE-2025-39994Linux kernel xc5000 use-after-free7.3CNA v3.10.2%2025-10-15Fix
CVE-2025-39993Linux kernel rc use-after-free7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39992Linux kernel swapoff memory management null pointer dereference–0.2%2025-10-15Fix
CVE-2025-39991Linux kernel ath11k Wi-Fi driver null pointer dereference–0.2%2025-10-15Fix
CVE-2025-39990Linux kernel BPF verifier vulnerability7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39988Linux kernel etas_es58x CAN driver buffer overflow7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39987Linux kernel hi311x CAN driver buffer overflow7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39986Linux kernel sun4i_can CAN driver buffer overflow7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39985Linux kernel mcba_usb CAN driver buffer overflow7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39984Linux kernel TUN driver XDP processing use-after-free–0.2%2025-10-15Fix
CVE-2025-39983Linux kernel Bluetooth HCI connection handling use-after-free8.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39982Linux kernel Bluetooth HCI connection handling use-after-free8.8CNA v3.10.3%2025-10-15Fix
CVE-2025-39981Linux kernel Bluetooth MGMT interface use-after-free7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39980Linux kernel nexthop groups vulnerability–0.2%2025-10-15Fix
CVE-2025-39979Linux kernel mlx5 flow counter use-after-free7.8CNA v3.10.1%2025-10-15Fix
CVE-2025-39978Linux kernel octeontx2-pf use-after-free7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39977Linux kernel futex requeue-PI use-after-free7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39976Linux kernel futex hash allocation improper locking7.8CNA v3.10.1%2025-10-15Fix
CVE-2025-39975Linux kernel SMB2 compound operation handling vulnerability9.8CNA v3.10.5%2025-10-15Fix
CVE-2025-39974Linux kernel osnoise tracing CPU list parser vulnerability–0.2%2025-10-15Fix
CVE-2025-39973Linux kernel i40e virtual function ring configuration vulnerability8.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39972Linux kernel i40e virtual function queue map vulnerability8.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39971Linux kernel i40e virtual function queue configuration vulnerability8.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39970In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference.8.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39969Linux kernel i40e virtual function resource allocation vulnerability8.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39968Linux kernel i40e virtual function filters vulnerability7.3CNA v3.10.1%2025-10-15Fix
CVE-2025-39967Linux kernel framebuffer console font handling integer overflow7.8CNA v3.10.2%2025-10-15Fix
CVE-2025-39966Linux kernel iommufd file descriptor handling use-after-free7.8CNA v3.10.1%2025-10-15Fix
CVE-2025-31702Dahua IPC incorrect permission assignment6.8CNA v3.10.5%2025-10-15Exploit code
CVE-2025-26861RSUPPORT RemoteCall Remote Support Program uncontrolled search path8.5CNA v4.00.2%2025-10-15
CVE-2025-26860RSUPPORT RemoteCall Remote Support Program uncontrolled search path8.5CNA v4.00.2%2025-10-15
CVE-2025-26859RSUPPORT RemoteView PC Application Console uncontrolled search path8.5CNA v4.00.2%2025-10-15
CVE-2025-20360Multiple Cisco Products Snort 3 MIME denial of service5.8CNA v3.10.4%2025-10-15Fix
CVE-2025-20359Multiple Cisco Products Snort 3 MIME information disclosure or denial of service6.5CNA v3.10.5%2025-10-15Fix
CVE-2025-20351Cisco Session Initiation Protocol (SIP) Software web UI cross-site scripting6.1CNA v3.10.3%2025-10-15Fix
CVE-2025-20350Cisco Session Initiation Protocol (SIP) Software web UI HTTP handling buffer overflow7.5CNA v3.10.5%2025-10-15Fix
CVE-2025-20329Cisco TelePresence Collaboration Endpoint and RoomOS software information disclosure4.9CNA v3.10.4%2025-10-15Fix
CVE-2025-11832Azure Access Technology BLU-IC2 APIs lack Rate Limiting10.0CNA v4.00.4%2025-10-15
CVE-2025-11746XStore Multipurpose WooCommerce WordPress theme authenticated (Subscriber+) local file inclusion8.8CNA v3.10.7%2025-10-15Fix
CVE-2025-11728Oceanpayment CreditCard Gateway WordPress plugin unauthorized access5.3CNA v3.10.3%2025-10-15
CVE-2025-11722Category and Products Accordion Panel WordPress plugin local file inclusion7.5CNA v3.10.6%2025-10-15
CVE-2025-11701Zip Attachments WordPress plugin unauthorized access5.3CNA v3.10.3%2025-10-15
CVE-2025-11692Zip Attachments WordPress plugin missing authorization to limited file deletion5.3CNA v3.10.2%2025-10-15
CVE-2025-11619Devolutions Server improper certificate validation8.8CISA ADP v3.10.2%2025-10-15Fix
CVE-2025-11568Luksmeta: Data corruption when handling luks1 partitions with luksmeta4.4CNA v3.10.1%2025-10-15Fix
CVE-2025-11501Dynamically Display Posts WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-10-15
CVE-2025-11365WP Google Map WordPress plugin authenticated (Contributor+) SQL injection6.5CNA v3.10.3%2025-10-15
CVE-2025-11196External Login WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-10-15
CVE-2025-11177External Login WordPress plugin unauthenticated SQL injection via log7.5CNA v3.10.4%2025-10-15