CVE-2025 list

CVE-2025 records published in October 2025

Page three of four: records 2,001 to 3,000 of the 3,687 published in October 2025, newest first. The first page carries the figures for October 2025.

CVE-2025 records published in October 2025, newest first: records 2,001 to 3,000 of 3,687
CVE Summary CVSS EPSS Published Signals
CVE-2025-11176Quick Featured Images WordPress plugin insecure direct object reference to Image manipulation4.3CNA v3.10.2%2025-10-15Fix
CVE-2025-11161WPBakery Page Builder WordPress plugin stored cross-site scripting via vc_custom_heading shortcode5.4NVD v3.10.2%2025-10-15Fix
CVE-2025-11160WPBakery Page Builder WordPress plugin stored cross-site scripting via Custom JS Module5.4NVD v3.10.2%2025-10-15Fix
CVE-2025-10869Stored cross-site scripting (XSS) in Oct8ne Chatbot6.1NVD v3.10.2%2025-10-15Fix
CVE-2025-10754DocoDoco Store Locator WordPress plugin authenticated (Editor+) arbitrary file upload7.2CNA v3.10.7%2025-10-15
CVE-2025-10743Outdoor WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-10-15
CVE-2025-10730Wp tabber widget WordPress plugin authenticated (Contributor+) SQL injection6.5CNA v3.10.3%2025-10-15
CVE-2025-10699Lenovo LeCloud Client improper certificate validation6.0CNA v4.00.3%2025-10-15
CVE-2025-10682TARIFFUXX WordPress plugin SQL injection6.5CNA v3.10.3%2025-10-15Fix
CVE-2025-10660WP Dashboard Chat WordPress plugin authenticated (Contributor+) SQL injection via id6.5CNA v3.10.3%2025-10-15
CVE-2025-10648YourMembership Single Sign On WordPress plugin unauthorized access5.3CNA v3.10.3%2025-10-15Fix
CVE-2025-10581Lenovo PC Manager uncontrolled search path8.5CNA v4.00.2%2025-10-15Fix
CVE-2025-10577Sound Research SECOMNService escalation of privilege8.5CNA v4.00.1%2025-10-15
CVE-2025-10576Sound Research SECOMNService escalation of privilege8.5CNA v4.00.1%2025-10-15Exploit code
CVE-2025-10575WP jQuery Pager WordPress plugin authenticated (Contributor+) SQL injection via shortcode6.5CNA v3.10.3%2025-10-15
CVE-2025-10486Content Writer WordPress plugin unauthenticated information exposure via Log file5.3CNA v3.10.3%2025-10-15Fix
CVE-2025-10406BlindMatrix e-Commerce WordPress plugin Contributor+ LFI5.5CISA ADP v3.10.3%2025-10-15Fix
CVE-2025-10313Find And Replace content for WordPress WordPress plugin stored cross-site scripting7.2CNA v3.10.3%2025-10-15
CVE-2025-10312Theme Importer WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-10-15
CVE-2025-10310Rich Snippet Site Report WordPress plugin authenticated (Admin+) SQL injection4.9CNA v3.10.4%2025-10-15
CVE-2025-10303Library Management System WordPress plugin missing authorization authenticated settings manipulation4.3CNA v3.10.2%2025-10-15Fix
CVE-2025-10301FunKItools WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.1%2025-10-15
CVE-2025-10300TopBar WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-10-15
CVE-2025-10299WPBifröst WordPress plugin privilege escalation8.8CNA v3.10.4%2025-10-15Fix
CVE-2025-10294OwnID Passwordless Login WordPress plugin authentication bypass9.8CNA v3.10.8%2025-10-15
CVE-2025-10293Keyy Two Factor Authentication (like Clef) WordPress plugin privilege escalation8.8CNA v3.10.4%2025-10-15
CVE-2025-10194Shortcode Button WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-10-15
CVE-2025-10186WhyDonate remove_row function missing authorization5.3CNA v3.10.4%2025-10-15Fix
CVE-2025-10141Digiseller WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-10-15Fix
CVE-2025-10140Quick Social Login WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-10-15
CVE-2025-10139WP BookWidgets WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-10-15Fix
CVE-2025-10135WP ViewSTL WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-15
CVE-2025-10133URLYar WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-15
CVE-2025-10132Dhivehi Text WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-15
CVE-2025-10056Task Scheduler WordPress plugin authenticated (Admin+) blind server-side request forgery4.4CNA v3.10.2%2025-10-15
CVE-2025-10051Demo Import Kit WordPress plugin authenticated (Admin+) arbitrary file upload7.2CNA v3.10.7%2025-10-15
CVE-2025-10045onOffice for WP-Websites WordPress plugin authenticated (Editor+) SQL injection4.9CNA v3.10.4%2025-10-15Fix
CVE-2025-10041Flex QR Code Generator WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2025-10-15Exploit codeFix
CVE-2025-10038Binary MLM Plan WordPress plugin unauthenticated limited privilege escalation6.5CNA v3.10.3%2025-10-15Fix
CVE-2025-9967Orion SMS OTP Verification WordPress plugin authentication bypass via account takeover9.8CNA v3.10.4%2025-10-15Fix
CVE-2025-9640Red Hat Enterprise Linux 10 samba: Vfs_streams_xattr uninitialized memory write possible4.3CNA v3.10.5%2025-10-15Fix
CVE-2025-9548Lenovo Power Management Driver null pointer dereference6.8CNA v4.00.1%2025-10-15Exploit codeFix
CVE-2025-8561Ova Advent WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.2%2025-10-15Fix
CVE-2025-8486Lenovo PC Manager execution with unnecessary privileges8.5CNA v4.00.2%2025-10-15Fix
CVE-2025-6042Lisfinity Core WordPress plugin privilege escalation7.3CNA v3.10.2%2025-10-15Fix
CVE-2025-6026Lenovo Universal Device Client improper certificate validation2.3CNA v4.00.1%2025-10-15Fix
CVE-2025-2529IBM Terracotta denial of service2.9CNA v3.10.2%2025-10-15Fix
CVE-2025-62376pwn.college DOJO workspace endpoint improper authentication9.5CNA v4.00.5%2025-10-14
CVE-2025-62374Parse JavaScript SDK ParseObject and internal APIs prototype pollution6.4CNA v3.10.4%2025-10-14Fix
CVE-2025-62366Mailgen vulnerable to HTML injection and cross-site scripting via plaintext email generation2.9CNA v4.00.4%2025-10-14Fix
CVE-2025-62172Home Assistant Energy dashboard entity name stored cross-site scripting8.5CNA v4.00.4%2025-10-14Fix
CVE-2025-62157argoproj argo-workflows argo Workflow may expose artifact repository credentials8.5CNA v4.00.5%2025-10-14Fix
CVE-2025-62156argoproj argo-workflows Argo Workflow has a Zipslip vulnerability8.1CNA v3.10.6%2025-10-14Fix
CVE-2025-61807Adobe Substance3D Stager integer overflow or wraparound7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61806Adobe Substance3D Stager out-of-bounds read7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61805Adobe Substance3D Stager out-of-bounds read7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61803Adobe Substance3D Stager integer overflow or wraparound7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61802Adobe Substance3D Stager use-after-free7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61801Adobe Dimension use-after-free7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61800Adobe Dimension integer overflow or wraparound7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61799Adobe Dimension out-of-bounds read7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61798Adobe Dimension out-of-bounds read7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-61797Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-10-14Fix
CVE-2025-61796Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-10-14Fix
CVE-2025-61678FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter8.6CNA v4.043.7%2025-10-14MetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-61675FreePBX Endpoint Manager SQL injection8.6CNA v4.038.8%2025-10-14MetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-60540karakeep server-side request forgery6.5CISA ADP v3.10.4%2025-10-14
CVE-2025-60537Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data.6.5CISA ADP v3.10.4%2025-10-14
CVE-2025-60536kafka-ui cluster configuration interface denial of service7.5CISA ADP v3.10.6%2025-10-14
CVE-2025-60535component /endpoints/currency/currency of Wallos v4.1.1 cross-site request forgery7.3CISA ADP v3.10.2%2025-10-14
CVE-2025-60374Perfex CRM chatbot stored cross-site scripting6.1CISA ADP v3.10.3%2025-10-14Exploit code
CVE-2025-59921Fortinet FortiADC information disclosure6.2CNA v3.10.3%2025-10-14
CVE-2025-59889Eaton IPP software improper authentication8.6CNA v3.10.2%2025-10-14Fix
CVE-2025-59502Microsoft Windows Remote Procedure Call denial of service7.5CNA v3.11.1%2025-10-14Fix
CVE-2025-59497Microsoft Defender for Linux denial of service7.0CNA v3.10.2%2025-10-14Fix
CVE-2025-59494Microsoft Azure Monitor Agent elevation of privilege7.8CNA v3.10.6%2025-10-14Fix
CVE-2025-59429FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page8.5CNA v4.00.2%2025-10-14Fix
CVE-2025-59428EspoCRM allows arbitrary user creation via stored SVG injection and CSRF5.4CNA v3.10.1%2025-10-14Fix
CVE-2025-59295Microsoft Windows URL Parsing remote code execution8.8CNA v3.11.9%2025-10-14Fix
CVE-2025-59294Microsoft Windows Taskbar Live Preview information disclosure2.1CNA v3.10.6%2025-10-14Fix
CVE-2025-59292Microsoft Azure Compute Gallery elevation of privilege8.2CNA v3.10.4%2025-10-14Fix
CVE-2025-59291Microsoft Confidential Azure Container Instances elevation of privilege8.2CNA v3.10.4%2025-10-14Fix
CVE-2025-59290Microsoft Windows Bluetooth service elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59289Microsoft Windows Bluetooth service elevation of privilege7.0CNA v3.10.2%2025-10-14Fix
CVE-2025-59288Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate5.3CNA v3.10.2%2025-10-14Fix
CVE-2025-59287Microsoft Windows Server Update Service (WSUS) deserialization of untrusted data9.8CNA v3.1100.0%2025-10-14KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-59285Microsoft Azure Monitor Agent elevation of privilege7.0CNA v3.10.8%2025-10-14Fix
CVE-2025-59284Microsoft Windows NTLM spoofing3.3CNA v3.11.0%2025-10-14Exploit codeFix
CVE-2025-59282Microsoft Windows Internet Information Services Inbox COM Objects remote code execution7.0CNA v3.10.6%2025-10-14Fix
CVE-2025-59281Microsoft Xbox Gaming Services elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59280Microsoft Windows SMB client tampering3.1CNA v3.10.5%2025-10-14Fix
CVE-2025-59278Microsoft Windows Authentication elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-59277Microsoft Windows Authentication elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59275Microsoft Windows Authentication elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-59261Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.2%2025-10-14Fix
CVE-2025-59260Microsoft Failover Cluster Virtual driver information disclosure5.5CNA v3.10.4%2025-10-14Fix
CVE-2025-59259Microsoft Windows Local Session Manager (LSM) denial of service6.5CNA v3.11.5%2025-10-14Fix
CVE-2025-59258Microsoft Windows Active Directory Federation Services (ADFS) information disclosure6.2CNA v3.10.6%2025-10-14Fix
CVE-2025-59257Microsoft Windows Local Session Manager (LSM) denial of service6.5CNA v3.11.5%2025-10-14Fix
CVE-2025-59255Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59254Microsoft DWM Core library elevation of privilege7.8CNA v3.11.1%2025-10-14Exploit codeFix
CVE-2025-59253Microsoft Windows Search service denial of service5.5CNA v3.10.3%2025-10-14Fix
CVE-2025-59250JDBC Driver for SQL Server spoofing8.1CNA v3.10.7%2025-10-14Fix
CVE-2025-59249Microsoft Exchange Server elevation of privilege8.8CNA v3.10.8%2025-10-14Fix
CVE-2025-59248Microsoft Exchange Server spoofing7.5CNA v3.11.0%2025-10-14Fix
CVE-2025-59244Microsoft Windows NTLM hash disclosure spoofing6.5CNA v3.10.8%2025-10-14Fix
CVE-2025-59243Microsoft Excel remote code execution7.8CNA v3.10.5%2025-10-14Fix
CVE-2025-59242Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59241Microsoft Windows Health and Optimized Experiences elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-59238Microsoft PowerPoint remote code execution7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59237Microsoft SharePoint remote code execution8.8CNA v3.12.5%2025-10-14Fix
CVE-2025-59236Microsoft Excel remote code execution8.4CNA v3.10.4%2025-10-14Fix
CVE-2025-59235Microsoft Excel information disclosure7.1CNA v3.10.7%2025-10-14Fix
CVE-2025-59234Microsoft Office remote code execution7.8CNA v3.10.6%2025-10-14Fix
CVE-2025-59233Microsoft Excel remote code execution7.8CNA v3.10.5%2025-10-14Fix
CVE-2025-59232Microsoft Excel information disclosure7.1CNA v3.10.5%2025-10-14Fix
CVE-2025-59231Microsoft Excel remote code execution7.8CNA v3.10.5%2025-10-14Fix
CVE-2025-59230Microsoft Windows improper access control7.8CNA v3.12.7%2025-10-14KEVFix
CVE-2025-59229Microsoft Office denial of service5.5CNA v3.10.4%2025-10-14Fix
CVE-2025-59228Microsoft SharePoint remote code execution8.8CNA v3.11.4%2025-10-14Fix
CVE-2025-59227Microsoft Office remote code execution7.8CNA v3.10.5%2025-10-14Fix
CVE-2025-59226Microsoft Office Visio remote code execution7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59225Microsoft Excel remote code execution7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59224Microsoft Excel remote code execution7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59223Microsoft Excel remote code execution7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59222Microsoft Word remote code execution7.8CNA v3.10.5%2025-10-14Fix
CVE-2025-59221Microsoft Word remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-59214Microsoft Windows File Explorer spoofing6.5CNA v3.11.8%2025-10-14Fix
CVE-2025-59213Configuration Manager elevation of privilege8.8CNA v3.10.4%2025-10-14Exploit codeFix
CVE-2025-59211Microsoft Windows Push Notification information disclosure5.5CNA v3.10.6%2025-10-14Fix
CVE-2025-59210Microsoft Windows Resilient File System (ReFS) Deduplication service elevation of privilege7.4CNA v3.10.3%2025-10-14Fix
CVE-2025-59209Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-59208Microsoft Windows MapUrlToZone information disclosure7.1CNA v3.10.5%2025-10-14Fix
CVE-2025-59207Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-59206Microsoft Windows Resilient File System (ReFS) Deduplication service elevation of privilege7.4CNA v3.10.4%2025-10-14Fix
CVE-2025-59205Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.2%2025-10-14Fix
CVE-2025-59204Microsoft Windows Management services information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-59203Microsoft Windows State Repository API server file information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-59202Microsoft Windows Remote Desktop services elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-59201Microsoft Windows Network Connection Status Indicator (NCSI) elevation of privilege7.8CNA v3.10.5%2025-10-14Fix
CVE-2025-59200Microsoft Windows data Sharing service spoofing7.7CNA v3.10.8%2025-10-14Fix
CVE-2025-59199Microsoft Windows Software Protection Platform (SPP) elevation of privilege7.8CNA v3.14.2%2025-10-14Fix
CVE-2025-59198Microsoft Windows Search service denial of service5.0CNA v3.10.5%2025-10-14Fix
CVE-2025-59197Microsoft Windows ETL Channel information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-59196Microsoft Windows Simple Search and Discovery Protocol (SSDP) service elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-59195Microsoft Windows Graphics component denial of service7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-59194Microsoft Windows Kernel elevation of privilege7.0CNA v3.12.7%2025-10-14Exploit codeFix
CVE-2025-59193Microsoft Windows Management services elevation of privilege7.0CNA v3.10.2%2025-10-14Fix
CVE-2025-59192Microsoft Windows storport.sys driver elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-59191Microsoft Windows Connected Devices Platform service elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-59190Microsoft Windows Search service denial of service5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-59189Microsoft Brokering File System elevation of privilege7.4CNA v3.10.3%2025-10-14Fix
CVE-2025-59188Microsoft Failover Cluster information disclosure5.5CNA v3.10.4%2025-10-14Fix
CVE-2025-59187Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-59186Microsoft Windows Kernel information disclosure5.5CNA v3.10.6%2025-10-14Fix
CVE-2025-59185Microsoft Windows NTLM hash disclosure spoofing6.5CNA v3.11.1%2025-10-14Fix
CVE-2025-59184Microsoft Windows Storage Spaces Direct information disclosure5.5CNA v3.10.4%2025-10-14Fix
CVE-2025-59051FreePBX Endpoint Manager command injection via Network Scanning feature8.6CNA v4.00.5%2025-10-14Fix
CVE-2025-58903Fortinet FortiOS unchecked return value2.5CNA v3.10.6%2025-10-14Fix
CVE-2025-58739Microsoft Windows File Explorer spoofing6.5CNA v3.10.8%2025-10-14Fix
CVE-2025-58738Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58737Microsoft Windows remote Desktop protocol remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58736Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58735Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.5%2025-10-14Fix
CVE-2025-58734Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58733Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58732Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.5%2025-10-14Fix
CVE-2025-58731Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58730Microsoft Windows inbox COM Objects (Global Memory) remote code execution7.0CNA v3.10.4%2025-10-14Fix
CVE-2025-58729Microsoft Windows Local Session Manager (LSM) denial of service6.5CNA v3.11.1%2025-10-14Fix
CVE-2025-58728Microsoft Windows Bluetooth service elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-58727Microsoft Windows Connected Devices Platform service elevation of privilege7.0CNA v3.10.2%2025-10-14Fix
CVE-2025-58726Microsoft Windows SMB server elevation of privilege7.5CNA v3.11.0%2025-10-14Exploit codeFix
CVE-2025-58725Microsoft Windows COM+ Event System service elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-58724Microsoft Arc Enabled Servers Azure Connected Machine Agent elevation of privilege7.8CNA v3.10.6%2025-10-14Fix
CVE-2025-58722Microsoft DWM Core library elevation of privilege7.8CNA v3.12.3%2025-10-14Fix
CVE-2025-58720Microsoft Windows Cryptographic services information disclosure7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-58719Microsoft Windows Connected Devices Platform service elevation of privilege4.7CNA v3.10.4%2025-10-14Fix
CVE-2025-58718Microsoft Remote Desktop client remote code execution8.8CNA v3.10.6%2025-10-14Fix
CVE-2025-58717Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.0%2025-10-14Fix
CVE-2025-58716Microsoft Windows Speech Runtime elevation of privilege8.8CNA v3.10.4%2025-10-14Fix
CVE-2025-58715Microsoft Windows Speech Runtime elevation of privilege8.8CNA v3.10.4%2025-10-14Fix
CVE-2025-58714Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-58325Fortinet FortiOS incorrect behavior7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-58324Fortinet FortiSIEM cross-site scripting6.1CNA v3.10.3%2025-10-14Fix
CVE-2025-57741Fortinet FortiClientMac incorrect permission assignment7.0CNA v3.10.1%2025-10-14Fix
CVE-2025-57740Fortinet FortiPAM heap-based buffer overflow6.7CNA v3.10.7%2025-10-14Fix
CVE-2025-57716Fortinet FortiClientWindows uncontrolled search path6.0CNA v3.10.2%2025-10-14Fix
CVE-2025-57618FastX3 thru path traversal7.3CISA ADP v3.10.7%2025-10-14
CVE-2025-57563StarNet Communications Corporation FastX v.4 path traversal6.5CISA ADP v3.10.4%2025-10-14
CVE-2025-56747Creativeitem Academy LMS improper privilege management6.5CISA ADP v3.10.3%2025-10-14
CVE-2025-55701Microsoft Windows Authentication elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-55700Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.0%2025-10-14Fix
CVE-2025-55699Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-55698Microsoft Windows DirectX Graphics Kernel denial of service7.7CNA v3.11.2%2025-10-14Fix
CVE-2025-55697Microsoft Windows azure Local elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-55696Microsoft Windows NtQueryInformation Token function (ntifs.h) elevation of privilege7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-55695Microsoft Windows WLAN AutoConfig service information disclosure5.5CNA v3.10.4%2025-10-14Fix
CVE-2025-55694Microsoft Windows Error Reporting service elevation of privilege7.8CNA v3.13.0%2025-10-14Fix
CVE-2025-55693Microsoft Windows Kernel elevation of privilege7.4CNA v3.12.0%2025-10-14Fix
CVE-2025-55692Microsoft Windows Error Reporting service elevation of privilege7.8CNA v3.13.4%2025-10-14Fix
CVE-2025-55691Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55690Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55689Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55688Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55687Microsoft Windows Resilient File System (ReFS) elevation of privilege7.4CNA v3.10.3%2025-10-14Fix
CVE-2025-55686Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55685Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55684Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55683Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-55682Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.5%2025-10-14Fix
CVE-2025-55681Microsoft Windows Desktop Window Manager elevation of privilege7.0CNA v3.15.4%2025-10-14Fix
CVE-2025-55680Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-55679Microsoft Windows Kernel information disclosure5.1CNA v3.10.5%2025-10-14Fix
CVE-2025-55678Microsoft Windows DirectX Graphics Kernel elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55677Microsoft Windows Device Association Broker service elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-55676Microsoft Windows USB Video Class System driver information disclosure5.5CNA v3.10.7%2025-10-14Fix
CVE-2025-55340Microsoft Windows Remote Desktop protocol security feature bypass7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55339Microsoft Windows Network driver Interface Specification (NDIS) driver elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-55338Microsoft Windows BitLocker security feature bypass6.1CNA v3.13.1%2025-10-14Fix
CVE-2025-55337Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.5%2025-10-14Fix
CVE-2025-55336Microsoft Windows Cloud Files Mini Filter driver information disclosure5.5CNA v3.10.6%2025-10-14Fix
CVE-2025-55335Microsoft Windows NTFS elevation of privilege7.4CNA v3.10.3%2025-10-14Fix
CVE-2025-55334Microsoft Windows Kernel security feature bypass6.2CNA v3.10.4%2025-10-14Fix
CVE-2025-55333Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.9%2025-10-14Fix
CVE-2025-55332Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.6%2025-10-14Fix
CVE-2025-55331Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-55330Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.6%2025-10-14Fix
CVE-2025-55328Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-55326Microsoft Windows Connected Devices Platform Service (Cdpsvc) remote code execution7.5CNA v3.10.8%2025-10-14Fix
CVE-2025-55325Microsoft Windows Storage Management Provider information disclosure5.5CNA v3.10.5%2025-10-14Fix
CVE-2025-55320Configuration Manager elevation of privilege6.8CNA v3.10.7%2025-10-14Fix
CVE-2025-55315Microsoft ASP.NET security feature bypass9.9CNA v3.166.5%2025-10-14Exploit codeFix
CVE-2025-55248Microsoft .NET, .NET Framework, and Visual Studio information disclosure4.8CNA v3.10.7%2025-10-14Fix
CVE-2025-55247Microsoft .NET elevation of privilege7.3CNA v3.10.6%2025-10-14Fix
CVE-2025-55240Visual Studio elevation of privilege7.3CNA v3.10.4%2025-10-14Fix
CVE-2025-55078Eclipse Foundation ThreadX incomplete validation of kernel object pointers in system calls5.7CNA v4.00.2%2025-10-14
CVE-2025-54973Fortinet FortiAnalyzer race condition5.3CNA v3.10.3%2025-10-14Fix
CVE-2025-54893Centreon Infra Monitoring Hosts templates configuration page stored cross-site scripting6.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54892Centreon Infra Monitoring SNMP traps group configuration page stored cross-site scripting6.8CNA v3.10.3%2025-10-14Fix
CVE-2025-54891Centreon Infra Monitoring ACL resource access configuration page stored cross-site scripting6.8CNA v3.10.3%2025-10-14Fix
CVE-2025-54889Centreon Infra Monitoring SNMP traps manufacturer configuration page stored cross-site scripting6.8CNA v3.10.3%2025-10-14Fix
CVE-2025-54822Fortinet FortiProxy improper authorization4.2CNA v3.10.3%2025-10-14Fix
CVE-2025-54603Claroty Secure Access OIDC authentication flow improper access control9.0CISA ADP v3.10.7%2025-10-14
CVE-2025-54284Adobe Illustrator out-of-bounds write7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54283Adobe Illustrator out-of-bounds write7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54282Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54281Adobe FrameMaker use-after-free7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54280Adobe Substance3D Viewer out-of-bounds write7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54276Adobe Substance3D Modeler out-of-bounds read7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54275Adobe Substance3D Viewer out-of-bounds write5.5CNA v3.10.2%2025-10-14Fix
CVE-2025-54274Adobe Substance3D Viewer stack-based buffer overflow7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54273Adobe Substance3D Viewer out-of-bounds write7.8CNA v3.10.2%2025-10-14Fix
CVE-2025-54272Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-10-14Fix
CVE-2025-54267Adobe Commerce incorrect authorization6.5CNA v3.10.4%2025-10-14Fix
CVE-2025-54266Adobe Commerce cross-site scripting (stored XSS)4.8CNA v3.10.3%2025-10-14Fix
CVE-2025-54265Adobe Commerce incorrect authorization5.9CNA v3.10.6%2025-10-14Fix
CVE-2025-54264Adobe Commerce cross-site scripting (stored XSS)8.1CNA v3.10.6%2025-10-14Fix
CVE-2025-54263Adobe Commerce incorrect authorization8.1CNA v3.10.6%2025-10-14Fix
CVE-2025-54196Adobe Connect URL redirection to untrusted site (open redirect)4.3CNA v3.10.3%2025-10-14Fix
CVE-2025-53845Fortinet FortiAnalyzer improper authentication6.2CNA v3.10.5%2025-10-14Fix
CVE-2025-53782Microsoft Exchange Server elevation of privilege8.4CNA v3.10.4%2025-10-14Fix
CVE-2025-53768Microsoft Windows xbox IStorageService elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-53717Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-53150Microsoft Windows Digital Media elevation of privilege7.8CNA v3.10.3%2025-10-14Fix
CVE-2025-53139Microsoft Windows Hello security feature bypass7.7CNA v3.10.3%2025-10-14Fix
CVE-2025-50175Microsoft Windows Digital Media elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-50174Microsoft Windows Device Association Broker service elevation of privilege7.0CNA v3.10.3%2025-10-14Fix
CVE-2025-50152Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.4%2025-10-14Fix
CVE-2025-49708Microsoft Graphics component elevation of privilege9.9CNA v3.11.2%2025-10-14Fix
CVE-2025-49553Adobe Connect cross-site scripting (DOM-based XSS)9.3CNA v3.10.5%2025-10-14Fix
CVE-2025-49552Adobe Connect cross-site scripting (DOM-based XSS)8.1CNA v3.10.4%2025-10-14Fix
CVE-2025-49201Fortinet FortiPAM improper authentication7.4CNA v3.10.6%2025-10-14Fix
CVE-2025-48813Microsoft Windows Virtual Secure Mode spoofing6.3CNA v3.10.3%2025-10-14Fix
CVE-2025-48004Microsoft Brokering File System elevation of privilege7.4CNA v3.12.0%2025-10-14Fix
CVE-2025-47989Microsoft Arc Enabled Servers Azure Connected Machine Agent elevation of privilege7.0CNA v3.10.6%2025-10-14Fix
CVE-2025-47979Microsoft Failover Cluster information disclosure5.5CNA v3.10.6%2025-10-14Fix
CVE-2025-47890Fortinet FortiOS open redirect2.5CNA v3.10.3%2025-10-14Fix
CVE-2025-47856Fortinet FortiVoice OS command injection7.2CNA v3.11.3%2025-10-14Fix
CVE-2025-46774Fortinet FortiClientMac improper signature verification6.8CNA v3.10.1%2025-10-14Fix
CVE-2025-46581ZTE ZXCDN product has a Struts RCE9.8CNA v3.10.8%2025-10-14
CVE-2025-42939Missing authorization Check in SAP S/4HANA (Manage Processing Rules for Bank Statements)4.3CNA v3.10.2%2025-10-14Fix
CVE-2025-42937Directory traversal vulnerability in SAP Print Service9.8CNA v3.10.7%2025-10-14Fix
CVE-2025-42910Unrestricted file upload vulnerability in SAP Supplier Relationship Management9.0CNA v3.10.5%2025-10-14Fix
CVE-2025-42909Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances3.0CNA v3.10.2%2025-10-14Fix
CVE-2025-42908Cross-site request forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP5.4CNA v3.10.2%2025-10-14Fix
CVE-2025-42906Directory traversal vulnerability in SAP Commerce Cloud5.3CNA v3.10.4%2025-10-14Fix
CVE-2025-42903SAP Financial Service Claims Management ICL_USER_GET_NAME_AND_ADDRESS RFC function vulnerability4.3CNA v3.10.3%2025-10-14Fix
CVE-2025-42902Memory corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform5.3CNA v3.10.4%2025-10-14Fix
CVE-2025-42901Code injection vulnerability in SAP Application Server for ABAP (BAPI Browser)5.4CNA v3.10.2%2025-10-14Fix
CVE-2025-41718Murrelektronik: Unprotected transport of credentials7.5CNA v3.10.3%2025-10-14
CVE-2025-41707Phoenix Contact: WebSocket handler denial of service5.3CNA v3.11.4%2025-10-14Fix
CVE-2025-41706Phoenix Contact: Webserver denial of service through Malformed Content-Length5.3CNA v3.11.7%2025-10-14Fix
CVE-2025-41705Phoenix Contact: WebSocket Message Interception leaks webfrontend credentials6.8CNA v3.10.5%2025-10-14Fix
CVE-2025-41704Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code5.3CNA v3.11.6%2025-10-14Fix
CVE-2025-41703Phoenix Contact: UPS Shutdown via Unauthenticated Modbus command7.5CNA v3.11.1%2025-10-14
CVE-2025-41699Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers8.8CNA v3.10.8%2025-10-14Fix
CVE-2025-40812Siemens Solid Edge SE2024 out-of-bounds read7.3CNA v4.00.1%2025-10-14Fix
CVE-2025-40811Siemens Solid Edge SE2024 out-of-bounds read7.3CNA v4.00.1%2025-10-14Fix
CVE-2025-40810Siemens Solid Edge SE2024 out-of-bounds write7.3CNA v4.00.1%2025-10-14Fix
CVE-2025-40809Siemens Solid Edge SE2024 out-of-bounds write7.3CNA v4.00.1%2025-10-14Fix
CVE-2025-40774Siemens SiPass integrated recoverable password storage6.7CNA v4.00.1%2025-10-14Fix
CVE-2025-40773Siemens SiPass integrated insecure direct object reference5.1CNA v4.00.2%2025-10-14Fix
CVE-2025-40772Siemens SiPass integrated cross-site scripting7.0CNA v4.00.3%2025-10-14Fix
CVE-2025-40771Siemens SIMATIC CP 1542SP-1 missing authentication9.3CNA v4.00.5%2025-10-14Fix
CVE-2025-40765Siemens TeleControl Server Basic missing authentication9.3CNA v4.00.5%2025-10-14Fix
CVE-2025-40755Siemens SINEC NMS SQL injection8.7CNA v4.00.4%2025-10-14Fix
CVE-2025-37149HPE ProLiant RL300 Gen11 Server out-of-bounds read6.0CNA v3.10.1%2025-10-14
CVE-2025-37148HPE ArubaOS (AOS) kernel panic triggered by Modified Ethernet Frames leads to denial of service6.5CNA v3.10.3%2025-10-14
CVE-2025-37147HPE ArubaOS (AOS) Secure Boot Bypass allows for Compromise of Hardware Root of Trust7.1CNA v3.10.2%2025-10-14
CVE-2025-37146HPE ArubaOS web management interface command injection7.2CNA v3.10.9%2025-10-14
CVE-2025-37145HPE ArubaOS (AOS) arbitrary file read4.9CNA v3.10.4%2025-10-14Fix
CVE-2025-37144HPE ArubaOS (AOS) arbitrary file read4.9CNA v3.10.4%2025-10-14Fix
CVE-2025-37143HPE ArubaOS (AOS) An arbitrary file read4.9CNA v3.10.4%2025-10-14Fix
CVE-2025-37142HPE ArubaOS (AOS) arbitrary file read4.9CNA v3.10.4%2025-10-14Fix
CVE-2025-37141HPE ArubaOS (AOS) arbitrary file read4.9CNA v3.10.4%2025-10-14Fix
CVE-2025-37140HPE ArubaOS (AOS) arbitrary file read4.9CNA v3.10.4%2025-10-14Fix
CVE-2025-37139HPE ArubaOS boot firmware denial of service6.0CNA v3.10.1%2025-10-14
CVE-2025-37138HPE ArubaOS (AOS) authenticated command injection6.2CNA v3.10.7%2025-10-14Fix
CVE-2025-37137HPE ArubaOS command-line interface improper access control6.5CNA v3.10.4%2025-10-14Fix
CVE-2025-37136HPE ArubaOS command-line interface improper access control6.5CNA v3.10.4%2025-10-14Fix
CVE-2025-37135HPE ArubaOS command-line interface improper access control6.5CNA v3.10.4%2025-10-14Fix
CVE-2025-37134HPE ArubaOS (AOS) authenticated command injection7.2CNA v3.11.2%2025-10-14Fix
CVE-2025-37133HPE ArubaOS (AOS) authenticated command injection7.2CNA v3.11.2%2025-10-14Fix
CVE-2025-37132HPE ArubaOS (AOS) An arbitrary file write7.2CNA v3.10.5%2025-10-14Fix
CVE-2025-36730Windsurf prompt injection via Filename4.6CNA v4.00.2%2025-10-14
CVE-2025-34267Flowise Authenticated command execution and sandbox bypass via Puppeteer and Playwright Packages9.9NVD v3.16.6%2025-10-14Fix
CVE-2025-33182NVIDIA Jetson Orin Series missing authorization7.6CNA v3.10.3%2025-10-14Fix
CVE-2025-33177NVIDIA Jetson Orin Series denial of service5.5CNA v3.10.1%2025-10-14Fix
CVE-2025-33044AMI AptioV exFat memory corruption issue5.8CNA v4.00.2%2025-10-14Fix
CVE-2025-31514Fortinet FortiOS A sensitive information in log files2.6CNA v3.10.4%2025-10-14Fix
CVE-2025-31366Fortinet FortiSASE cross-site scripting4.5CNA v3.10.4%2025-10-14Fix
CVE-2025-31365Fortinet FortiClientMac code injection5.5CNA v3.10.3%2025-10-14Fix
CVE-2025-27906IBM Content Navigator information disclosure5.3CNA v3.10.3%2025-10-14Fix
CVE-2025-25255Fortinet FortiOS improperly implemented security check4.8CNA v3.10.4%2025-10-14Fix
CVE-2025-25253Fortinet FortiProxy improper certificate host validation6.8CNA v3.10.1%2025-10-14Fix
CVE-2025-25252Fortinet FortiOS insufficient session expiration4.3CNA v3.10.3%2025-10-14Fix
CVE-2025-25004Microsoft PowerShell elevation of privilege7.3CNA v3.10.5%2025-10-14Fix
CVE-2025-24990Microsoft Windows untrusted pointer dereference7.8CNA v3.16.4%2025-10-14KEVExploit codeFix
CVE-2025-24052Microsoft Windows Agere Modem driver elevation of privilege7.8CNA v3.12.5%2025-10-14Fix
CVE-2025-23356NVIDIA Isaac Lab missing authentication8.4CNA v3.10.2%2025-10-14Fix
CVE-2025-22833AMI AptioV FixupArray Pointer Validation in NTFS4.6CNA v4.00.2%2025-10-14Fix
CVE-2025-22832AMI AptioV buffer overflow in NTFS when parsing the ATTRIBUTE_LIST5.8CNA v4.00.2%2025-10-14Fix
CVE-2025-22831AMI AptioV buffer overflow in NTFS when parsing the VOLUME_NAME5.8CNA v4.00.2%2025-10-14Fix
CVE-2025-22258Fortinet FortiSRA heap-based buffer overflow5.7CNA v3.10.6%2025-10-14Fix
CVE-2025-20724MediaTek chipsets out-of-bounds read in wlan5.5CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20723MediaTek chipsets out-of-bounds write in gnss7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20722MediaTek chipsets integer overflow in gnss5.5CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20721MediaTek chipsets out-of-bounds write in imgsensor7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20720MediaTek chipsets heap overflow in wlan8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-20719MediaTek chipsets stack overflow in wlan8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-20718MediaTek chipsets stack overflow in wlan7.8CISA ADP v3.10.2%2025-10-14Fix
CVE-2025-20717MediaTek chipsets stack overflow in wlan7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20716MediaTek chipsets out-of-bounds write in wlan7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20715MediaTek chipsets out-of-bounds write in wlan7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20714MediaTek chipsets stack overflow in wlan7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20713MediaTek chipsets stack overflow in wlan7.8CISA ADP v3.10.1%2025-10-14Fix
CVE-2025-20712MediaTek chipsets heap overflow in wlan8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-20711MediaTek chipsets specified type in wlan8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-20710MediaTek chipsets integer overflow in wlan8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-20709MediaTek chipsets classic buffer overflow in wlan8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-11736itsourcecode Online Examination System index.php SQL injection9.8NVD v3.10.5%2025-10-14
CVE-2025-11731Red Hat Hardened Images libxslt: Type confusion in exsltfuncresultcompfunction of libxslt3.1CNA v3.10.3%2025-10-14Fix
CVE-2025-11721Mozilla memory safety bug fixed in Firefox 144 and Thunderbird 1449.8v3.10.3%2025-10-14Fix
CVE-2025-11720Spoofing risk in Android custom tabs8.1NVD v3.10.3%2025-10-14Fix
CVE-2025-11719Mozilla Firefox use-after-free caused by the native messaging web extension API on Windows9.8v3.10.3%2025-10-14Fix
CVE-2025-11718Address bar could be spoofed on Android using visibilitychange6.5NVD v3.10.2%2025-10-14Fix
CVE-2025-11717The password edit screen was not hidden in Android card view9.1NVD v3.10.3%2025-10-14Fix
CVE-2025-11716Sandboxed iframes allowed links to open in external apps (Android only)6.5CISA ADP v3.10.2%2025-10-14Fix
CVE-2025-11715Mozilla memory safety bugs fixed in Firefox ESR, Thunderbird ESR, Firefox 144 and Thunderbird 1448.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-11714Mozilla Firefox memory safety bugs8.8CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-11713Mozilla Firefox potential user-assisted code execution in Copy as cURL command8.1CISA ADP v3.10.4%2025-10-14Fix
CVE-2025-11712Mozilla Firefox and Thunderbird OBJECT tag handling cross-site scripting6.1CISA ADP v3.10.3%2025-10-14Fix
CVE-2025-11711Mozilla Firefox some non-writable object properties could be modified6.5CISA ADP v3.10.2%2025-10-14Fix
CVE-2025-11710Mozilla Firefox cross-process information leaked due to malicious IPC messages9.8CISA ADP v3.10.4%2025-10-14Fix
CVE-2025-11709Mozilla Firefox out-of-bounds read/write in a privileged process triggered by WebGL textures9.8CISA ADP v3.10.4%2025-10-14Fix
CVE-2025-11708Mozilla Firefox use-after-free in MediaTrackGraphImpl::GetInstance9.8CISA ADP v3.10.5%2025-10-14Fix
CVE-2025-11577Clevo UEFI firmware Boot Guard information disclosure7.6CISA ADP v3.10.3%2025-10-14
CVE-2025-11548ibi WebFOCUS unauthenticated RCE9.3CNA v4.00.5%2025-10-14
CVE-2025-11498B&R Industrial Automation Automation Runtime CSV formula injection5.3CNA v4.00.3%2025-10-14Fix
CVE-2025-10986Ivanti Endpoint Manager Mobile admin panel path traversal4.7CNA v3.10.6%2025-10-14Fix
CVE-2025-10985Ivanti Endpoint Manager Mobile admin panel OS command injection7.2CNA v3.120.4%2025-10-14Fix
CVE-2025-10732SureForms WordPress plugin information disclosure4.3CNA v3.10.3%2025-10-14Fix
CVE-2025-10610SFS Consulting Information Processing Industry and Foreign Trade Winsure improper neutralization9.8CNA v3.10.4%2025-10-14
CVE-2025-10357Simple SEO WordPress plugin Contributor+ stored XSS6.1CISA ADP v3.10.2%2025-10-14Fix
CVE-2025-10243Ivanti Endpoint Manager Mobile admin panel OS command injection7.2CNA v3.120.4%2025-10-14Fix
CVE-2025-10242Ivanti Endpoint Manager Mobile admin panel OS command injection7.2CNA v3.120.4%2025-10-14Fix
CVE-2025-10228Session hijacking in Rolantis Information Technologies' Agentis8.8CNA v3.10.3%2025-10-14Fix
CVE-2025-9437Rockwell Automation ArmorStart® AOP denial of service8.7CNA v4.00.4%2025-10-14
CVE-2025-9178Rockwell Automation 1715 EtherNet/IP Comms module denial of service7.7CNA v4.00.3%2025-10-14Fix
CVE-2025-9177Rockwell Automation 1715 EtherNet/IP Comms module denial of service7.7CNA v4.00.3%2025-10-14Fix
CVE-2025-9124Rockwell Automation Compact GuardLogix® 5370 denial of service8.7CNA v4.00.4%2025-10-14Fix
CVE-2025-9068Rockwell Automation FactoryTalk® Linx privilege escalation8.5CNA v4.00.2%2025-10-14Fix
CVE-2025-9067Rockwell Automation FactoryTalk® Linx privilege escalation8.5CNA v4.00.2%2025-10-14Fix
CVE-2025-9066Rockwell Automation FactoryTalk® ViewPoint XXE to denial of service8.7CNA v4.00.5%2025-10-14Fix
CVE-2025-9064Rockwell Automation FactoryTalk View Machine Edition path traversal8.7CNA v4.00.6%2025-10-14Fix
CVE-2025-9063Rockwell Automation PanelView Plus 7 Performance Series B authentication bypass7.0CNA v4.00.4%2025-10-14Fix
CVE-2025-8594Pz-LinkCard WordPress plugin Contributor+ SSRF3.8CISA ADP v3.10.2%2025-10-14Fix
CVE-2025-8459A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page7.7CNA v3.10.2%2025-10-14Fix
CVE-2025-8430Centreon Infra Monitoring commands connectors configuration stored cross-site scripting6.8CNA v3.10.2%2025-10-14Fix
CVE-2025-8429Centreon Infra Monitoring ACL action access configuration stored cross-site scripting6.8CNA v3.10.2%2025-10-14Fix
CVE-2025-8428Centreon Infra Monitoring XSS found in the HTTP loader widget6.8CNA v3.10.2%2025-10-14Fix
CVE-2025-7330Rockwell Automation 1783-NATR cross-site request forgery7.0CNA v4.00.2%2025-10-14Fix
CVE-2025-7329Rockwell Automation Comms 1783-NATR stored cross-site scripting8.5CNA v4.00.3%2025-10-14Fix
CVE-2025-7328Rockwell Automation Comms 1783-NATR multiple broken authentication9.9CNA v4.00.5%2025-10-14Fix
CVE-2025-5946Centreon Infra Monitoring RCE7.2CNA v3.113.5%2025-10-14MetasploitEmerging ThreatsExploit codeFix
CVE-2025-0033AMD EPYC™ 7003 Series Processors improper access control6.0CNA v3.10.2%2025-10-14
CVE-2025-62392Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62391Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62390Ivanti Endpoint Manager SQL injection6.5CNA v3.11.7%2025-10-13Fix
CVE-2025-62389Ivanti Endpoint Manager SQL injection6.5CNA v3.11.7%2025-10-13Fix
CVE-2025-62388Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62387Ivanti Endpoint Manager SQL injection6.5CNA v3.11.7%2025-10-13Fix
CVE-2025-62386Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62385Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62384Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62383Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-62365LibreNMS vulnerable to Reflected-XSS in `report_this` function5.5CNA v4.00.2%2025-10-13Fix
CVE-2025-62364text-generation-webui allows arbitrary file read via symbolic link upload6.2CNA v3.10.6%2025-10-13
CVE-2025-62363zheny-creator YtGrabber-TUI yt-grabber-tui allows arbitrary code execution7.8CNA v3.10.2%2025-10-13Fix
CVE-2025-62362Name and e-mail of employee that has done a publication is discoverable in GPP-burgerportaal6.9CNA v4.00.3%2025-10-13Fix
CVE-2025-62361WeGIA open redirect vulnerability in `control.php` endpoint `nextPage` parameter4.8CNA v4.00.2%2025-10-13Fix
CVE-2025-62360WeGIA SQL injection via id_dependente param at endpoint `/html/funcionario/dependente_documento.php`9.4CNA v4.00.9%2025-10-13Exploit codeFix
CVE-2025-62359WeGIA cross-site scripting (XSS) Reflected endpoint id_pet5.3CNA v4.00.2%2025-10-13Fix
CVE-2025-62358WeGIA reflected XSS to account TakeOver at /html/configuracao/configuracao_geral.php5.4CNA v3.10.3%2025-10-13Fix
CVE-2025-62252Liferay is vulnerable to authorization bypass through user-controlled key5.3CNA v4.00.3%2025-10-13Fix
CVE-2025-62251Liferay has incorrect permission assignment for critical resource4.8CNA v4.00.3%2025-10-13Fix
CVE-2025-62246Liferay Mentions Web is vulnerable to cross-site scripting4.8CNA v4.00.2%2025-10-13Fix
CVE-2025-62244Liferay Publications vulnerable to authorization bypass through user-controlled key4.8CNA v4.00.3%2025-10-13Fix
CVE-2025-62243Liferay Publications is vulnerable to incorrect authorization5.3CNA v4.00.2%2025-10-13Fix
CVE-2025-62242Liferay Account Admin Web vulnerable to authorization bypass through user-controlled key5.3CNA v4.00.3%2025-10-13Fix
CVE-2025-62241Liferay Commerce Order Content Web is vulnerable to authorization bypass through user-controlled key5.3CNA v4.00.3%2025-10-13Fix
CVE-2025-62179WeGIA cadastro_funcionario_pessoa_existente.php SQL injection8.6CNA v4.00.4%2025-10-13Fix
CVE-2025-62178WeGIA cadastro_atendido_parentesco_pessoa_nova.php reflected cross-site scripting3.5CNA v3.10.2%2025-10-13Fix
CVE-2025-62177WeGIA vulnerable to SQL injection8.6CNA v4.00.5%2025-10-13Fix
CVE-2025-62176Mastodon streaming server vulnerability4.3CNA v3.10.3%2025-10-13Fix
CVE-2025-62175Mastodon streaming API fails to disconnect disabled and suspended users4.3CNA v3.10.2%2025-10-13Fix
CVE-2025-62174Mastodon allows continued access after password reset via CLI3.5CNA v3.10.2%2025-10-13Fix
CVE-2025-62170rAthena map-server use-after-free vulnerability in RODEX7.5CNA v3.10.4%2025-10-13Fix
CVE-2025-61775Vickey's unexpired email confirmation link can be reused to send repeated confirmation emails6.9CNA v4.00.3%2025-10-13Fix
CVE-2025-61688Omni leaks information via the API8.6CNA v3.10.3%2025-10-13Fix
CVE-2025-59836Omni is vulnerable to DoS via Empty Create/Update Resource requests5.3CNA v3.10.6%2025-10-13Fix
CVE-2025-58084Mattermost Desktop App crashes when clicking on malformed external URL3.5CNA v3.10.3%2025-10-13Fix
CVE-2025-43991Dell SupportAssist for Home PCs symlink following6.3CNA v3.10.1%2025-10-13Fix
CVE-2025-39965Linux kernel XFRM SPI allocation use-after-free7.8CNA v3.10.2%2025-10-13Exploit codeFix
CVE-2025-39964Linux Kernel race condition7.8CNA v3.11.4%2025-10-13KEVExploit codeFix
CVE-2025-37729Elastic Cloud Enterprise (ECE) improper neutralization of special elements used in a template engine9.1CNA v3.10.7%2025-10-13Fix
CVE-2025-36087IBM Security Verify Access hard coded credentials8.1CNA v3.10.3%2025-10-13Fix
CVE-2025-31996Unprotected files are impacting HCL Unica Platform5.3CNA v3.10.2%2025-10-13Fix
CVE-2025-31995HCL Unica MaxAI Workbench is vulnerable to improper input validation3.5CNA v3.10.5%2025-10-13
CVE-2025-31994HCL Unica Campaign is vulnerable to reflected cross-site scripting (XSS)4.3CNA v3.10.2%2025-10-13
CVE-2025-27259Ericsson Network Manager: Improper neutralization of user controlled input2.4CNA v4.00.2%2025-10-13Fix
CVE-2025-27258Ericsson Network Manager: Escalation of privilege6.9CNA v4.00.3%2025-10-13Fix
CVE-2025-11695MongoDB Rust Driver configuration may unexpectedly disable certificate validation8.0CNA v3.10.2%2025-10-13Fix
CVE-2025-11675Ragic｜Enterprise Cloud Database arbitrary file upload8.6CNA v4.00.6%2025-10-13Fix
CVE-2025-11674PiExtract｜SOOP-CLM server-side request forgery6.9CNA v4.00.4%2025-10-13Fix
CVE-2025-11673PiExtract ｜SOOP-CLM hidden functionality8.6CNA v4.00.6%2025-10-13Fix
CVE-2025-11672EBM Technologies｜Uniweb/SoliPACS WebServer missing authentication6.9CNA v4.00.4%2025-10-13Fix
CVE-2025-11671EBM Technologies｜Uniweb/SoliPACS WebServer missing authentication6.9CNA v4.00.4%2025-10-13Fix
CVE-2025-11668code-projects Automated Voting System update_user.php SQL injection7.2NVD v3.10.4%2025-10-13
CVE-2025-11667code-projects Automated Voting System add_candidate_modal.php. SQL injection8.8NVD v3.10.4%2025-10-13
CVE-2025-11666Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password8.4CNA v4.00.2%2025-10-13
CVE-2025-11665D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection9.8NVD v3.16.8%2025-10-13
CVE-2025-11664Campcodes Online Beauty Parlor Management System search-appointment.php SQL injection9.8NVD v3.10.5%2025-10-13
CVE-2025-11663Campcodes Online Beauty Parlor Management System manage-services.php SQL injection6.1NVD v3.10.3%2025-10-13
CVE-2025-11662SourceCodester Best Salon Management System booking.php SQL injection9.8NVD v3.10.5%2025-10-13
CVE-2025-11661ProjectsAndPrograms School Management System missing authentication9.8NVD v3.10.5%2025-10-13
CVE-2025-11660ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload9.8NVD v3.10.5%2025-10-13
CVE-2025-11659ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload9.8NVD v3.10.6%2025-10-13
CVE-2025-11658ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload9.8NVD v3.10.5%2025-10-13
CVE-2025-11657ProjectsAndPrograms School Management System createNotice.php unrestricted upload9.8NVD v3.10.6%2025-10-13
CVE-2025-11656ProjectsAndPrograms School Management System editNotes.php unrestricted upload9.8NVD v3.10.6%2025-10-13
CVE-2025-11655Total.js Flow SVG file unrestricted upload5.1CNA v4.00.3%2025-10-13
CVE-2025-11654yousaf530 Inferno Online Clothing Store log.php SQL injection6.9CNA v4.00.3%2025-10-13
CVE-2025-11653UTT HiPER 2620G fNTP strcpy buffer overflow8.7CNA v4.00.8%2025-10-13
CVE-2025-11652UTT 进取 518G formTaskEdit_ap buffer overflow8.7CNA v4.00.8%2025-10-13
CVE-2025-11651UTT 进取 518G formRemoteControl sub_4247AC buffer overflow8.7CNA v4.00.8%2025-10-13
CVE-2025-11623Ivanti Endpoint Manager SQL injection6.5CNA v3.10.8%2025-10-13Fix
CVE-2025-11622Ivanti Endpoint Manager deserialization of untrusted data7.8CNA v3.10.8%2025-10-13Fix
CVE-2025-11184qwc-services qwc-registration-gui cross-site scripting vulnerability in QWC2 Registration GUI6.9CNA v4.00.4%2025-10-13
CVE-2025-11183Cross-site scripting vulnerability in QWC26.9CNA v4.00.4%2025-10-13Fix
CVE-2025-10720WP Private Content Plus WordPress plugin password Protection bypass6.5CISA ADP v3.10.3%2025-10-13Exploit code
CVE-2025-10558Dassault Systèmes 3DSwymer 3DSearch stored cross-site scripting8.7CNA v3.10.2%2025-10-13Fix
CVE-2025-10557Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.2%2025-10-13Fix
CVE-2025-10556Dassault Systèmes ENOVIA Specification Manager Specification Management stored cross-site scripting8.7CNA v3.10.2%2025-10-13Fix
CVE-2025-10552Dassault Systèmes 3DSwymer stored cross-site scripting8.7CNA v3.10.2%2025-10-13Fix
CVE-2025-9976Dassault Systèmes 3DEXPERIENCE platform Station Launcher app OS command injection9.0CNA v3.10.9%2025-10-13
CVE-2025-9968ASUS Armoury Crate UnifyScanner component link following8.5CNA v4.00.2%2025-10-13Fix
CVE-2025-9902IDOR in Akınsoft QRMenu7.5CNA v3.10.3%2025-10-13Fix
CVE-2025-9713Ivanti Endpoint Manager path traversal8.8CNA v3.115.3%2025-10-13Fix
CVE-2025-9698The Plus Addons for Elementor WordPress plugin Author+ stored XSS6.8CISA ADP v3.10.3%2025-10-13Fix
CVE-2025-9337ASUS Armoury Crate AsIO3.sys driver null pointer dereference6.8CNA v4.00.1%2025-10-13Fix
CVE-2025-9336ASUS Armoury Crate AsIO3.sys driver stack-based buffer overflow6.8CNA v4.00.1%2025-10-13Fix
CVE-2025-9265API authentication bypass via header spoofing vulnerability in Kiloview NDI N30 Products10.0CNA v4.00.2%2025-10-13Fix
CVE-2025-8915Hard-coded TLS private key in Kiloview N30 firmware8.7CNA v4.00.2%2025-10-13
CVE-2025-7707World-Writable NLTK Cache Directory vulnerability in run-llama/llama_index7.8NVD v3.10.2%2025-10-13Fix
CVE-2025-6919SQLi in Cats Informatics' Aykome9.8CNA v3.10.4%2025-10-13Fix
CVE-2025-0636Arbitrary code execution vulnerability in Ericsson RAN Compute and Site Controller8.4CNA v3.10.3%2025-10-13Fix
CVE-2025-61884Oracle E-Business Suite server-side request forgery (SSRF)7.5CNA v3.195.9%2025-10-12KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-52616HCL Unica is affected by an exposure of sensitive information5.3CNA v3.10.3%2025-10-12Fix
CVE-2025-52615HCL Unica Platform is impacted by misconfigured security related HTTP headers3.5CNA v3.10.2%2025-10-12Fix
CVE-2025-52614HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability3.5CNA v3.10.1%2025-10-12Fix
CVE-2025-33096IBM Engineering Requirements Management DOORS Next denial of service6.5CNA v3.10.3%2025-10-12Fix
CVE-2025-31998HCL Unica Centralized Offer Management information disclosure3.5CNA v3.10.4%2025-10-12Fix
CVE-2025-31997HCL Unica Centralized Offer Management is vulnerable to insecure direct object references (IDOR)4.2CNA v3.10.2%2025-10-12Fix
CVE-2025-31993HCL Unica Centralized Offer Management is vulnerable to a potential server-side request forgery3.5CNA v3.10.2%2025-10-12Fix
CVE-2025-31992HCL MaxAI Assistant is susceptible to a HTML injection4.6CNA v3.10.2%2025-10-12
CVE-2025-31969HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)4.0CNA v3.10.2%2025-10-12Fix
CVE-2025-11650Tomofun Furbo 360/Furbo Mini Password shadow weak hash4.0v3.10.2%2025-10-12
CVE-2025-11649Tomofun Furbo 360/Furbo Mini Root Account hard-coded password6.3NVD v3.10.1%2025-10-12
CVE-2025-11648Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery7.4v3.10.5%2025-10-12
CVE-2025-11647Tomofun Furbo 360/Furbo Mini GATT service information disclosure6.8v3.10.6%2025-10-12
CVE-2025-11646Tomofun Furbo 360/Furbo Mini GATT service access control8.1v3.10.6%2025-10-12
CVE-2025-11645Tomofun Furbo Mobile App Authentication Token sensitive information2.4CNA v4.00.3%2025-10-12
CVE-2025-11644Tomofun Furbo 360/Furbo Mini UART sensitive information4.2v3.10.3%2025-10-12
CVE-2025-11643Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials8.1v3.10.3%2025-10-12
CVE-2025-11642Tomofun Furbo 360/Furbo Mini Registration denial of service4.1CNA v4.00.1%2025-10-12
CVE-2025-11641Tomofun Furbo 360/Furbo Mini Trial Restriction access control6.4v3.10.2%2025-10-12
CVE-2025-11640Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission5.3v3.10.2%2025-10-12
CVE-2025-11639Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information5.5v3.10.2%2025-10-12
CVE-2025-11638Tomofun Furbo 360/Furbo Mini Bluetooth denial of service6.5v3.10.3%2025-10-12
CVE-2025-11637Tomofun Furbo 360 Audio race condition3.7NVD v3.10.3%2025-10-12
CVE-2025-11636Tomofun Furbo 360 account server-side request forgery8.1NVD v3.10.4%2025-10-12
CVE-2025-11635Tomofun Furbo 360 file upload resource consumption6.5NVD v3.10.5%2025-10-12
CVE-2025-11634Tomofun Furbo 360/Furbo Mini UART information disclosure4.6v3.10.2%2025-10-12
CVE-2025-11633Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation5.9v3.10.3%2025-10-12
CVE-2025-11631RainyGao DocSys deleteDoc.do path traversal9.1NVD v3.10.8%2025-10-12
CVE-2025-11630RainyGao DocSys file upload uploadDoc.do updateRealDoc path traversal9.8NVD v3.10.7%2025-10-12
CVE-2025-11629RainyGao DocSys getUserList.do getUserList SQL injection9.8NVD v3.10.4%2025-10-12
CVE-2025-11628jimit105 Project-Online-Shopping-Website Product Inventory delete.php SQL injection5.1CNA v4.00.3%2025-10-12
CVE-2025-2140IBM Engineering Requirements Management DOORS Next spoofing5.7CNA v3.10.1%2025-10-12Fix
CVE-2025-2139IBM Engineering Requirements Management DOORS Next security bypass3.5CNA v3.10.2%2025-10-12Fix
CVE-2025-2138IBM Engineering Requirements Management DOORS Next data modification3.5CNA v3.10.2%2025-10-12Fix
CVE-2025-58301Huawei HarmonyOS buffer overflow vulnerability in the device management module6.2CNA v3.10.1%2025-10-11Fix
CVE-2025-58300Huawei HarmonyOS buffer overflow vulnerability in the device management module6.2CNA v3.10.1%2025-10-11Fix
CVE-2025-58299Huawei HarmonyOS use-after-free (UAF) vulnerability in the storage management module8.4CNA v3.10.1%2025-10-11Fix
CVE-2025-58298Huawei HarmonyOS data processing error vulnerability in the package management module7.3CNA v3.10.1%2025-10-11Fix
CVE-2025-58297Huawei HarmonyOS buffer overflow vulnerability in the sensor service5.9CNA v3.10.1%2025-10-11Fix
CVE-2025-58295Huawei HarmonyOS buffer overflow vulnerability in the development framework module5.9CNA v3.10.1%2025-10-11Fix
CVE-2025-58293Huawei HarmonyOS vulnerability of improper exception handling in the print module5.5CNA v3.10.1%2025-10-11Fix
CVE-2025-58292Huawei HarmonyOS denial of service (DoS) vulnerability in the office service3.3CNA v3.10.1%2025-10-11Fix
CVE-2025-58291Huawei HarmonyOS denial of service (DoS) vulnerability in the office service3.3CNA v3.10.1%2025-10-11Fix
CVE-2025-58290Huawei HarmonyOS denial of service (DoS) vulnerability in the office service3.3CNA v3.10.1%2025-10-11Fix
CVE-2025-58289Huawei HarmonyOS vulnerability of improper exception handling in the print module5.9CNA v3.10.1%2025-10-11Fix
CVE-2025-58288Huawei HarmonyOS denial of service (DoS) vulnerability in the office service5.5CNA v3.10.1%2025-10-11Fix
CVE-2025-58287Huawei HarmonyOS use-after-free (UAF) vulnerability in the office service7.8CNA v3.10.1%2025-10-11Fix
CVE-2025-58286Huawei HarmonyOS denial of service (DoS) vulnerability in the office service3.3CNA v3.10.1%2025-10-11Fix
CVE-2025-58285Huawei HarmonyOS permission control vulnerability in the media module5.3CNA v3.10.1%2025-10-11Fix
CVE-2025-58284Huawei HarmonyOS permission control vulnerability in the network module5.9CNA v3.10.1%2025-10-11Fix
CVE-2025-58283Huawei HarmonyOS permission control vulnerability in the Wi-Fi module5.5CNA v3.10.1%2025-10-11Fix
CVE-2025-58282Huawei HarmonyOS permission control vulnerability in the camera module2.8CNA v3.10.1%2025-10-11Fix
CVE-2025-58278Huawei HarmonyOS identity authentication bypass vulnerability in the Gallery app6.2CNA v3.10.1%2025-10-11Fix
CVE-2025-58277Huawei HarmonyOS permission verification bypass vulnerability in the Camera app4.0CNA v3.10.1%2025-10-11Fix
CVE-2025-54654Huawei HarmonyOS permission control vulnerability in the Gallery module6.2CNA v3.10.1%2025-10-11Fix
CVE-2025-31718UNISOC chipsets modem crash7.5CNA v3.11.0%2025-10-11Fix
CVE-2025-31717UNISOC chipsets modem crash7.5CNA v3.10.6%2025-10-11Fix
CVE-2025-11615SourceCodester Best Salon Management System add_invoice.php SQL injection9.8NVD v3.10.5%2025-10-11
CVE-2025-11614SourceCodester Best Salon Management System edit-appointment.php SQL injection9.8NVD v3.10.4%2025-10-11
CVE-2025-11613code-projects Simple Food Ordering System addcategory.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11612code-projects Simple Food Ordering System addproduct.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11611SourceCodester Simple Inventory System user.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11610SourceCodester Simple Inventory System brand.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11609code-projects Hospital Management System express-session hard-coded key8.1NVD v3.10.5%2025-10-11
CVE-2025-11608code-projects E-Banking System POST parameter register.php SQL injection9.8NVD v3.10.5%2025-10-11
CVE-2025-11607harry0703 MoneyPrinterTurbo API endpoint music.py upload_music path traversal8.8NVD v3.10.5%2025-10-11
CVE-2025-11606iPynch Social Network Website Search SQL injection5.3CNA v4.00.2%2025-10-11
CVE-2025-11605code-projects Client Details System update-profile.php SQL injection8.8NVD v3.10.4%2025-10-11
CVE-2025-11604Projectworlds Online Ordering Food System all-orders.php SQL injection9.8NVD v3.10.4%2025-10-11
CVE-2025-11603code-projects Simple Food Ordering System editproduct.php SQL injection8.8NVD v3.10.4%2025-10-11
CVE-2025-11601SourceCodester Online Student Result System login.php SQL injection9.8NVD v3.10.4%2025-10-11
CVE-2025-11600code-projects Simple Food Ordering System editcategory.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11599Campcodes Online Apartment Visitor Management System forgot-password.php SQL injection9.8NVD v3.10.4%2025-10-11
CVE-2025-11597code-projects E-Commerce Website product_add_qty.php SQL injection9.8NVD v3.10.4%2025-10-11
CVE-2025-11596code-projects E-Commerce Website delete_order_details.php SQL injection9.8NVD v3.10.5%2025-10-11
CVE-2025-11595Campcodes Online Apartment Visitor Management System admin-profile.php SQL injection9.8NVD v3.10.4%2025-10-11
CVE-2025-11594ywxbear PHP-Bookstore-Website-Example quantity handler improper input validation6.9CNA v4.00.4%2025-10-11
CVE-2025-11593CodeAstro Gym Management System delete-equipment.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11592CodeAstro Gym Management System edit-equipmentform.php SQL injection8.8NVD v3.10.4%2025-10-11
CVE-2025-11591CodeAstro Gym Management System delete-member.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11590CodeAstro Gym Management System equipment-entry.php SQL injection8.8NVD v3.10.3%2025-10-11
CVE-2025-11533WP Freeio WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.6%2025-10-11Reported exploitedFix
CVE-2025-11518WPC Smart Wishlist for WooCommerce WordPress plugin insecure direct object reference5.3CNA v3.10.2%2025-10-11Fix
CVE-2025-11380Everest Backup WordPress plugin missing authorization to unauthenticated information exposure5.9CNA v3.10.4%2025-10-11Exploit codeFix
CVE-2025-11254Contest Gallery WordPress plugin CSV injection4.3CNA v3.10.3%2025-10-11Fix
CVE-2025-11197Draft List WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-11Fix
CVE-2025-11167CM Registration WordPress plugin open redirect4.7CNA v3.10.2%2025-10-11Fix
CVE-2025-10376Course Redirects for Learndash WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-10-11
CVE-2025-10375Web Accessibility By accessiBe WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-10-11Fix
CVE-2025-10190WP Easy Toggles WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-11
CVE-2025-10185NEX-Forms Ultimate Forms Plugin for WordPress authenticated (Admin+) SQL injection4.9CNA v3.10.3%2025-10-11Fix
CVE-2025-10175WP Links Page WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2025-10-11Fix
CVE-2025-10167Stock History and Reports Manager for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-11Fix
CVE-2025-10129WordPress Live Webcam Widget and Shortcode plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-11
CVE-2025-10048My Auctions Allegro WordPress plugin authenticated (Admin+) SQL injection4.9CNA v3.10.3%2025-10-11Fix
CVE-2025-9975WP Scraper WordPress plugin authenticated (Administrator+) server-side request forgery6.8CNA v3.10.3%2025-10-11Fix
CVE-2025-9950Error Log Viewer by BestWebSoft WordPress plugin authenticated (Administrator+) arbitrary file read4.9CNA v3.10.7%2025-10-11Fix
CVE-2025-9947Custom 404 Pro WordPress plugin authenticated (Administrator+) SQL injection via `path` parameter4.9CNA v3.10.3%2025-10-11Fix
CVE-2025-9626Page Blocks WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-10-11
CVE-2025-9621WidgetPack Comment System WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-10-11
CVE-2025-9560Colibri Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-11Fix
CVE-2025-9496Enable Media Replace WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-10-11Fix
CVE-2025-9196Trinity Audio WordPress plugin unauthenticated information exposure5.3CNA v3.11.0%2025-10-11NucleiFix
CVE-2025-8682Newsup WordPress theme missing authorization to authenticated (Subscriber+) plugin installation4.3CNA v3.10.2%2025-10-11Fix
CVE-2025-8606GSheetConnector For Gravity Forms WordPress plugin cross-site request forgery2.4CNA v3.10.2%2025-10-11Fix
CVE-2025-8593GSheetConnector For Gravity Forms WordPress plugin authorization bypass8.8CNA v3.10.4%2025-10-11Fix
CVE-2025-8484Code Quality Control Tool WordPress plugin unauthenticated information exposure via Log files5.3CNA v3.10.3%2025-10-11Fix
CVE-2025-7652Easy Plugin Stats WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-10-11
CVE-2025-6553Ovatheme Events Manager WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.8%2025-10-11Fix
CVE-2025-6439WooCommerce Designer Pro WordPress plugin unauthenticated arbitrary file deletion9.8CNA v3.10.8%2025-10-11
CVE-2025-62292SonarSource SonarQube incorrect resource transfer4.3CNA v3.10.2%2025-10-10Fix
CVE-2025-62245Liferay Portal is vulnerable to CSRF through publication comments5.1CNA v4.00.2%2025-10-10Fix
CVE-2025-62239Liferay Portal is vulnerable to XSS through its workflow process builder4.6CNA v4.00.2%2025-10-10Fix
CVE-2025-62238Liferay Portal's Membership page is vulnerable to XSS through “name“ text field4.8CNA v4.00.2%2025-10-10Fix
CVE-2025-62237Liferay Portal Commerce is vulnerable to XSS through account name field4.8CNA v4.00.2%2025-10-10Fix
CVE-2025-62162cel-rust may panic during Parsing of Invalid CEL Expressions7.5CNA v3.10.4%2025-10-10Fix
CVE-2025-62159external-secrets External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval8.7CNA v4.00.3%2025-10-10Fix
CVE-2025-62158Frappe had attachments made by students to their assignments of type Text set to public2.7CNA v4.00.3%2025-10-10Fix
CVE-2025-61930Emlog Pro has CSRF issue that enables Admin Password Reset8.1CNA v3.10.2%2025-10-10
CVE-2025-61929CherryHQ Cherry Studio cherrystudio:// protocol handler code injection9.7CNA v3.10.5%2025-10-10
CVE-2025-61927capricorn86 happy-dom happy DOM: VM Context Escape can lead to remote code execution7.2CNA v4.00.6%2025-10-10Fix
CVE-2025-61925Astro's `X-Forwarded-Host` is reflected with no validation6.5CNA v3.10.4%2025-10-10Fix
CVE-2025-61921Sinatra has ReDoS vulnerability in ETag header value generation2.7CNA v4.00.5%2025-10-10Fix
CVE-2025-61920Authlib is vulnerable to denial of service via Oversized JOSE Segments7.5CNA v3.10.6%2025-10-10Fix
CVE-2025-61919Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing7.5CNA v3.10.6%2025-10-10Fix
CVE-2025-61912python-ldap vulnerable to improper encoding or escaping of output and improper null termination5.5CNA v4.00.5%2025-10-10Fix
CVE-2025-61911python-ldap has sanitization bypass in ldap.filter.escape_filter_chars5.5CNA v4.00.3%2025-10-10Fix
CVE-2025-61871Buffalo NAS Navigator2 unquoted search path8.4CNA v4.00.2%2025-10-10
CVE-2025-61864FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT VS6ComFile!load_link_inf use-after-free8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61863FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds read8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61862FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds read8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61861FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT VS6ComFile!load_link_inf out-of-bounds read8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61860FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds read8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61859FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds write8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61858FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT VS6ComFile!set_AnimationItem out-of-bounds write8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61857FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds write8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61856FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT stack-based buffer overflow8.4CNA v4.00.2%2025-10-10Fix
CVE-2025-61780Rack has possible information disclosure5.8CNA v3.10.6%2025-10-10Fix
CVE-2025-61689HTTP.jl vulnerable to header injection/Response splitting via header construction8.7CNA v4.00.3%2025-10-10Fix
CVE-2025-61505e107 deserialization of untrusted data6.5CISA ADP v3.10.4%2025-10-10
CVE-2025-61319yogeshojha rengine cross-site scripting6.1CISA ADP v3.10.3%2025-10-10
CVE-2025-61152python-jose JWT signature verification authentication bypass6.5CISA ADP v3.10.3%2025-10-10
CVE-2025-60880Bagisto is vulnerable to XSS through Admin Panel's product creation path8.3v3.10.4%2025-10-10Fix
CVE-2025-60869Publii CMS site configuration fields stored cross-site scripting7.3CNA v3.10.3%2025-10-10
CVE-2025-60868Alt Redirect: Potential authentication bypass by spoofing through query-string stripping logic flaw6.5CISA ADP v3.10.2%2025-10-10Fix
CVE-2025-60838Mingsoft MCMS An arbitrary file upload6.5CISA ADP v3.10.3%2025-10-10
CVE-2025-60378Fairsketch RISE Ultimate Project Manager Stored HTML injection8.1CISA ADP v3.11.1%2025-10-10Exploit code
CVE-2025-60308Fabian Simple Online Hotel Reservation System cross-site scripting4.1CISA ADP v3.10.2%2025-10-10
CVE-2025-60307Carmelo Computer Laboratory System SQL injection9.8CISA ADP v3.10.4%2025-10-10
CVE-2025-60306code-projects Simple Car Rental System improper authentication9.9CISA ADP v3.10.4%2025-10-10
CVE-2025-60305Senior-walter Online Student Clearance System logic flaw8.8CISA ADP v3.10.4%2025-10-10
CVE-2025-60269Huayi-tec JEEWMS SQL injection9.4CISA ADP v3.10.3%2025-10-10
CVE-2025-60268Huayi-tec JEEWMS An arbitrary file upload6.5v3.10.3%2025-10-10
CVE-2025-59530quic-go has client crash due to Premature HANDSHAKE_DONE Frame7.5CNA v3.10.5%2025-10-10Fix
CVE-2025-55903Perfex CRM v3.3.1 A HTML injection8.3CISA ADP v3.10.3%2025-10-10Exploit code
CVE-2025-52885GHSL-2025-042: Poppler has use-after-free6.1CNA v4.00.2%2025-10-10Fix
CVE-2025-52655HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability3.1CNA v3.10.2%2025-10-10
CVE-2025-52650HCL AION is susceptible to Inline script execution allowed in CSP vulnerability8.2CNA v3.10.2%2025-10-10Fix
CVE-2025-52647HCL BigFix WebUI is affected by a host header poisoning6.1CNA v3.10.2%2025-10-10
CVE-2025-52635HCL AION is susceptible to Trusted types in scripts not enforced in CSP3.7CNA v3.10.3%2025-10-10Fix
CVE-2025-52634HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed3.7CNA v3.10.2%2025-10-10Fix
CVE-2025-52632HCL AION is susceptible to Missing Secure attribute in Encrypted Session (SSL) Cookie vulnerability6.5CNA v3.10.1%2025-10-10Fix
CVE-2025-52630HCL AION is susceptible to Missing or insecure X-Content-Type-Options header vulnerability3.7CNA v3.10.2%2025-10-10Fix
CVE-2025-52625HCL AION is susceptible to Cacheable SSL Page Found vulnerability3.7CNA v3.10.2%2025-10-10Fix
CVE-2025-52624HCL AION is susceptible to Bypass of the script allow list configuration vulnerability5.4CNA v3.10.2%2025-10-10Fix
CVE-2025-48043Ash Framework: Filter authorization misapplies impossible bypass/runtime policies8.6CNA v4.00.4%2025-10-10Fix
CVE-2025-41089xibosignage xibo-cms reflected cross-site scripting (XSS) in CMS4.8CNA v4.00.3%2025-10-10Fix
CVE-2025-41088xibosignage xibo-cms stored cross-site scripting (XSS) in CMS5.1CNA v4.00.4%2025-10-10Exploit codeFix
CVE-2025-40640Stored cross-site scripting (XSS) in Energy CRM by Status Tracker5.4NVD v3.10.2%2025-10-10
CVE-2025-37727Elasticsearch Insertion of sensitive information in log file5.7CNA v3.10.2%2025-10-10Fix
CVE-2025-30001Apache StreamPark: Authenticated users can trigger remote command execution7.3CISA ADP v3.10.6%2025-10-10Fix
CVE-2025-25018Kibana stored cross-site scripting (XSS)8.7CNA v3.10.2%2025-10-10Fix
CVE-2025-25017Kibana stored cross-site scripting (XSS)8.2CNA v3.10.3%2025-10-10Fix
CVE-2025-23309NVIDIA GeForce uncontrolled search path8.2CNA v3.10.2%2025-10-10Fix
CVE-2025-23282NVIDIA Virtual GPU Manager double free7.0CNA v3.10.2%2025-10-10Fix
CVE-2025-23280NVIDIA GeForce use-after-free7.0CNA v3.10.2%2025-10-10Fix
CVE-2025-21070Samsung Mobile Samsung Notes SPI decoder out-of-bounds write4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21069Samsung Mobile Samsung Notes parsing of image data out-of-bounds read4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21068Samsung Mobile Samsung Notes reading of image data out-of-bounds read4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21067Samsung Mobile Samsung Notes allocation of image buffer out-of-bounds read4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21066Samsung Mobile Samsung Notes SPI decoder out-of-bounds read4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21065Samsung Mobile Retail Mode improper input validation6.6CNA v3.10.2%2025-10-10Exploit code
CVE-2025-21064Samsung Mobile Smart Switch improper authentication8.8CNA v3.10.3%2025-10-10Fix
CVE-2025-21063Samsung Mobile Samsung Voice Recorder improper access control4.6CNA v3.10.2%2025-10-10Fix
CVE-2025-21062Samsung Mobile Smart Switch weak cryptographic algorithm7.8CNA v3.10.1%2025-10-10Fix
CVE-2025-21061Samsung Mobile Smart Switch cleartext storage of sensitive information7.1CNA v3.10.1%2025-10-10Fix
CVE-2025-21060Samsung Mobile Smart Switch cleartext storage of sensitive information5.5CNA v3.10.1%2025-10-10Fix
CVE-2025-21059Samsung Mobile Samsung Health improper authorization6.2CNA v3.10.1%2025-10-10Fix
CVE-2025-21058Samsung Mobile Routines improper access control7.3CNA v3.10.1%2025-10-10
CVE-2025-21057Samsung Mobile Samsung Notes implicit intent for sensitive communication4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21055Samsung Mobile Devices libimagecodec.quram.so out-of-bounds read4.3CNA v3.10.3%2025-10-10Fix
CVE-2025-21054Samsung Mobile Devices out-of-bounds read4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21053Samsung Mobile Devices out-of-bounds write4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21052Samsung Mobile Devices out-of-bounds write4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21051Samsung Mobile Devices out-of-bounds write4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21050Samsung Android Contacts app vulnerability7.1CNA v3.10.1%2025-10-10Fix
CVE-2025-21049Samsung Mobile Devices SecSettings improper access control5.5CNA v3.10.1%2025-10-10Fix
CVE-2025-21048Samsung Mobile Devices Knox Enterprise relative path traversal6.7CNA v3.10.2%2025-10-10Fix
CVE-2025-21047Samsung Mobile Devices KnoxGuard improper access control5.2CNA v3.10.2%2025-10-10Fix
CVE-2025-21046Samsung Mobile Devices WindowManager improper access control2.4CNA v3.10.2%2025-10-10Fix
CVE-2025-21045Samsung Galaxy Watch insecure storage of sensitive information4.0CNA v3.10.1%2025-10-10Fix
CVE-2025-21044Samsung Mobile Devices fingerprint trustlet out-of-bounds write5.7CNA v3.10.1%2025-10-10Fix
CVE-2025-11626Loop with unreachable exit condition (infinite loop) in Wireshark5.5CNA v3.10.1%2025-10-10Fix
CVE-2025-11618Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP5.3CNA v4.00.3%2025-10-10Fix
CVE-2025-11617Buffer over-read when receiving IPv6 packets with incorrect payload length in FreeRTOS-Plus-TCP5.3CNA v4.00.3%2025-10-10Fix
CVE-2025-11616Buffer over-read when receiving improperly sized ICMPv6 packets in FreeRTOS-Plus-TCP5.3CNA v4.00.3%2025-10-10Fix
CVE-2025-11589CodeAstro Gym Management System user-payment.php SQL injection8.8NVD v3.10.4%2025-10-10
CVE-2025-11588CodeAstro Gym Management System index.php SQL injection8.8NVD v3.10.3%2025-10-10
CVE-2025-11586Tenda AC7 setNotUpgrade stack-based overflow9.8NVD v3.10.9%2025-10-10
CVE-2025-11585code-projects Project Monitoring System useredit.php SQL injection9.8NVD v3.10.4%2025-10-10
CVE-2025-11584code-projects Online Job Search Engine searchjob.php SQL injection9.8NVD v3.10.4%2025-10-10
CVE-2025-11583code-projects Online Job Search Engine postjob.php SQL injection9.8NVD v3.10.4%2025-10-10
CVE-2025-11582code-projects Online Job Search Engine registration.php SQL injection9.8NVD v3.10.4%2025-10-10
CVE-2025-11581PowerJob OpenAPIController runJob authorization7.5v3.10.5%2025-10-10
CVE-2025-11580PowerJob has missing authorization in its /user/list file6.9CNA v4.01.1%2025-10-10Nuclei
CVE-2025-11579nwaples rardecode DoS via out of memory crash6.5NVD v3.10.4%2025-10-10Exploit codeFix
CVE-2025-11570drupal-pattern-lab/unified-twig-extensions cross-site scripting4.8CNA v4.00.2%2025-10-10
CVE-2025-11450Reflected cross-site scripting in ServiceNow AI Platform5.3CNA v4.00.4%2025-10-10Fix
CVE-2025-11449Reflected cross-site scripting in ServiceNow AI Platform5.3CNA v4.00.4%2025-10-10Fix
CVE-2025-11190Synchroweb Kiwire captive portal open redirect5.4CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-11189Synchroweb Kiwire captive portal cross-site scripting7.3CISA ADP v3.10.4%2025-10-10Fix
CVE-2025-11188Synchroweb Kiwire captive portal SQL injection7.3CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-10124Booking Manager WordPress plugin Contributor+ Booking deletion4.5CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-9554Owl Carousel 2 Critical Unsupported SA-CONTRIB-2025-1045.3CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-9553API Key manager Critical Unsupported SA-CONTRIB-2025-1035.3CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-9552Synchronize composer.json With Contrib Modules Critical Unsupported SA-CONTRIB-2025-1025.3CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-9551Protected Pages Moderately critical Access bypass SA-CONTRIB-2025-1016.5CISA ADP v3.10.4%2025-10-10Fix
CVE-2025-9550Facets Moderately critical cross-site scripting SA-CONTRIB-2025-1006.1CISA ADP v3.10.2%2025-10-10Fix
CVE-2025-9549Facets Moderately critical information disclosure SA-CONTRIB-2025-0996.5CISA ADP v3.10.2%2025-10-10Fix
CVE-2025-8887IDOR in Usta Information Systems' Aybs Interaktif6.1CNA v3.10.1%2025-10-10
CVE-2025-8886Authorization bypass in Usta Information Systems' Aybs Interaktif6.7CNA v3.10.2%2025-10-10
CVE-2025-8093Authenticator Login Moderately critical Access bypass SA-CONTRIB-2025-0988.8CISA ADP v3.10.3%2025-10-10Fix
CVE-2025-7781WP JobHunt WordPress plugin authenticated (Candidate+) stored cross-site scripting via cs_job_title6.4CNA v3.10.2%2025-10-10Fix
CVE-2025-7374WP JobHunt Authenticated (Custom+) authorization bypass5.4CNA v3.10.2%2025-10-10Fix
CVE-2025-62240Liferay Portal is vulnerable to XSS through its Calendar Events parameters4.8CNA v4.00.2%2025-10-09Fix
CVE-2025-62228Apache Flink CDC is vulnerable to SQL injection through maliciously crafted identifiers5.1CNA v4.00.5%2025-10-09Fix
CVE-2025-61928better-auth better Auth: Unauthenticated API key creation through api-key plugin9.3CNA v4.017.9%2025-10-09Emerging ThreatsFix
CVE-2025-61926Allstar Reviewbot has authentication bypass via Hard-coded Webhook Secret4.6CNA v4.00.4%2025-10-09Fix
CVE-2025-61783python-social-auth social-app-django python Social Auth Django has unsafe account association6.3CNA v4.00.5%2025-10-09Fix
CVE-2025-61779Trustee's attestation-policy endpoint is not protected by admin autentication8.7CNA v4.00.4%2025-10-09Fix
CVE-2025-61773pyLoad CNL and captcha handlers allow code injection via unsanitized parameters8.1CNA v3.10.4%2025-10-09Fix
CVE-2025-61602BigBlueButton vulnerable to Chat DoS via invalid reactionEmojiId7.5CNA v3.10.4%2025-10-09Fix
CVE-2025-61601BigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutation7.5CNA v3.10.5%2025-10-09Fix
CVE-2025-61577D-Link DIR-816 stack-based buffer overflow7.5CISA ADP v3.15.7%2025-10-09Emerging Threats
CVE-2025-61532SVX Portal last_heard_page.php cross-site scripting6.1CISA ADP v3.10.3%2025-10-09
CVE-2025-60375Perfex CRM login mechanism authentication bypass7.3CISA ADP v3.10.3%2025-10-09
CVE-2025-60316Mayuri K Pet Grooming Management Software SQL injection9.4CISA ADP v3.10.4%2025-10-09
CVE-2025-60304Fabian Simple Scheduling System cross-site scripting6.1CISA ADP v3.10.2%2025-10-09
CVE-2025-60302Fabian Client Details System cross-site scripting6.1CISA ADP v3.10.2%2025-10-09
CVE-2025-60267bestfeng Xckk SQL injection6.5v3.10.2%2025-10-09
CVE-2025-60266bestfeng Xckk SQL injection6.5v3.10.2%2025-10-09
CVE-2025-60265bestfeng Xckk SQL injection6.5v3.10.2%2025-10-09
CVE-2025-60010Junos OS and Junos OS Evolved: Device allows login for user with expired password5.3CNA v4.00.2%2025-10-09Fix
CVE-2025-60009Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-60006Junos OS Evolved: OS command injection vulnerabilities fixed4.8CNA v4.01.0%2025-10-09Fix
CVE-2025-60004Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash8.7CNA v4.00.4%2025-10-09Fix
CVE-2025-60002Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-60001Junos Space: Create Quick template page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-60000Junos Space: Generate Report page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59999Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59998Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59997Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59996Junos Space: Configuration view page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59995Juniper Networks Junos Space Quick Template page reflected cross-site scripting5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59994Junos Space: Quick template page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59993Junos Space: Space Node setting fields are vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59992Junos Space: Secure console page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59991Junos Space: Device Management pages are vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59990Junos Space: Template creation pages are vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59989Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59988Junos Space: Generate Report page is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59987Juniper Networks Junos Space device search field reflected cross-site scripting5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59986Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59985Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59984Junos Space: Global Search is vulnerable to reflected cross-site script injection5.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59983Junos Space: Template Definition page is vulnerable to reflected cross-site script injection5.1CNA v4.00.3%2025-10-09Fix
CVE-2025-59982Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection5.1CNA v4.00.3%2025-10-09Fix
CVE-2025-59981Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection5.1CNA v4.00.3%2025-10-09Fix
CVE-2025-59980Juniper Networks Junos OS FTP server authentication bypass6.9CNA v4.00.3%2025-10-09Fix
CVE-2025-59978Junos Space: Stored cross-site scripting vulnerability in web application9.4CNA v4.00.5%2025-10-09Fix
CVE-2025-59976Junos Space: Arbitrary file download vulnerability in web interface7.1CNA v4.00.3%2025-10-09Fix
CVE-2025-59975Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS8.7CNA v4.00.4%2025-10-09Fix
CVE-2025-59974Junos Space Security Director: Persistent cross-site scripting (XSS)9.3CNA v4.00.4%2025-10-09Fix
CVE-2025-59968Junos Space Security Director: Insufficient authorization for sensitive resources in web interface7.7CNA v4.00.3%2025-10-09Fix
CVE-2025-59967Juniper Networks Junos OS Evolved PFE management daemon null pointer dereference7.1CNA v4.00.2%2025-10-09Fix
CVE-2025-59964Juniper Networks Junos OS Packet Forwarding Engine uninitialized resource use8.7CNA v4.00.4%2025-10-09Fix
CVE-2025-59962Juniper Networks Junos OS routing protocol daemon uninitialized pointer access6.0CNA v4.00.2%2025-10-09Fix
CVE-2025-59958Juniper Networks Junos OS Evolved Packet Forwarding Engine improper check for exceptional conditions6.9CNA v4.00.3%2025-10-09Fix
CVE-2025-59957Juniper Networks Junos OS insufficient protected file origin validation error7.0CNA v4.00.2%2025-10-09Fix
CVE-2025-59286Copilot information disclosure9.3CNA v3.10.6%2025-10-09Fix
CVE-2025-59272Copilot information disclosure9.3CNA v3.10.6%2025-10-09Fix
CVE-2025-59271Microsoft Redis Enterprise elevation of privilege8.7CNA v3.10.7%2025-10-09Fix
CVE-2025-59252M365 Copilot information disclosure9.3CNA v3.10.6%2025-10-09Fix
CVE-2025-59247Microsoft Azure PlayFab elevation of privilege8.8CNA v3.11.5%2025-10-09Fix
CVE-2025-59246Azure Entra ID elevation of privilege9.8CNA v3.17.7%2025-10-09Fix
CVE-2025-59218Azure Entra ID elevation of privilege9.6CNA v3.10.7%2025-10-09Fix
CVE-2025-59146QuantumNous new-api new API has authenticated server-side request forgery (SSRF) issue8.5CNA v3.10.2%2025-10-09Fix
CVE-2025-56683component /app/marketplace.html of Logseq v0.10.9 cross-site scripting9.6CISA ADP v3.10.5%2025-10-09
CVE-2025-56426Webkul Bagisto command injection6.5CISA ADP v3.10.4%2025-10-09
CVE-2025-55321Microsoft Azure Monitor Log Analytics spoofing9.3CNA v3.10.4%2025-10-09Fix
CVE-2025-55200BigBlueButton vulnerable to stored XSS via name of user at Shared Notes7.1CNA v3.10.2%2025-10-09Fix
CVE-2025-52961Juniper Networks Junos OS Evolved Connectivity Fault Management resource exhaustion7.1CNA v4.00.5%2025-10-09Fix
CVE-2025-52960Juniper Networks Junos OS Session Initialization protocol buffer overflow8.2CNA v4.00.3%2025-10-09Fix
CVE-2025-47355Qualcomm Snapdragon out-of-bounds write in DSP service7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47354Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47351Qualcomm Snapdragon integer overflow or wraparound in DSP service7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47349Qualcomm Snapdragon use of out-of-range pointer offset in DSP service7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47347Qualcomm Snapdragon stack-based buffer overflow in Automotive software platform based on QNX7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47342Qualcomm Snapdragon use-after-free in BT controller7.1CNA v3.10.2%2025-10-09Fix
CVE-2025-47341Qualcomm Snapdragon buffer copy without checking size of input in Camera7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47340Qualcomm Snapdragon out-of-bounds write in DSP service7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-47338Qualcomm Snapdragon untrusted pointer dereference in DSP service7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-45095Lavasoft Web Companion DCIService.exe service path privilege escalation7.3CISA ADP v3.10.3%2025-10-09
CVE-2025-43296Apple macOS cross-site request forgery5.5CISA ADP v3.10.1%2025-10-09Fix
CVE-2025-39963Linux kernel io_uring notification linking memory leak7.8CNA v3.10.2%2025-10-09Fix
CVE-2025-39962Linux kernel rxrpc ticket decoding out-of-bounds write7.5CNA v3.10.2%2025-10-09Fix
CVE-2025-39961Linux kernel AMD IOMMU page table race condition8.8CNA v3.10.1%2025-10-09Fix
CVE-2025-39960Linux kernel ACPI GPIO lookup improper initialization7.3CNA v3.10.2%2025-10-09Fix
CVE-2025-39959Linux kernel AMD ACP I2S driver null pointer dereference5.5v3.10.1%2025-10-09Fix
CVE-2025-39958Linux kernel s390 IOMMU device attach denial of service7.8NVD v3.10.2%2025-10-09Fix
CVE-2025-39957Linux kernel mac80211 S1G scanning vulnerability7.1CNA v3.10.2%2025-10-09Fix
CVE-2025-39956Linux kernel igc Ethernet driver denial of service7.8CNA v3.10.2%2025-10-09Fix
CVE-2025-39955Linux kernel TCP Fast Open vulnerability7.8NVD v3.10.2%2025-10-09Fix
CVE-2025-39954Linux kernel sunxi-ng dual-divider clock divide-by-zero5.5v3.10.1%2025-10-09Fix
CVE-2025-39664Checkmk Path-Traversal in report scheduler7.1CNA v4.00.7%2025-10-09Fix
CVE-2025-36225IBM Aspera Faspex information disclosure4.3CNA v3.10.2%2025-10-09Fix
CVE-2025-36171IBM Aspera Faspex denial of service4.9CNA v3.10.3%2025-10-09Fix
CVE-2025-35062Newforma Info Exchange (NIX) default anonymous access9.8NVD v3.10.4%2025-10-09Fix
CVE-2025-35061Newforma Project Center authentication bypass by replay5.9NVD v3.10.4%2025-10-09Fix
CVE-2025-35060Newforma Info Exchange (NIX) stored XSS via SVG file upload5.4NVD v3.10.2%2025-10-09Fix
CVE-2025-35059Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx6.1NVD v3.10.2%2025-10-09Fix
CVE-2025-35058Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx5.9NVD v3.10.4%2025-10-09Fix
CVE-2025-35057Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx6.0CNA v4.00.3%2025-10-09Fix
CVE-2025-35056Newforma Info Exchange (NIX) limited file read5.0NVD v3.10.4%2025-10-09Fix
CVE-2025-35055Newforma Info Exchange (NIX) insecure file upload8.7CNA v4.00.5%2025-10-09Fix
CVE-2025-35054Newforma Info Exchange (NIX) insufficiently protected credentials5.3NVD v3.10.1%2025-10-09
CVE-2025-35053Newforma Info Exchange (NIX) arbitrary file read and delete6.4NVD v3.10.4%2025-10-09
CVE-2025-35052Newforma Info Exchange (NIX) shared hard-coded secret key6.3CNA v4.00.4%2025-10-09
CVE-2025-35051Newforma Project Center Server (NPCS) .NET unauthenticated deserialization7.7CNA v4.00.8%2025-10-09
CVE-2025-35050Newforma Info Exchange (NIX) .NET unauthenticated deserialization9.3CNA v4.00.9%2025-10-09
CVE-2025-34248D-Link Nuclias Connect directory traversal to arbitrary file deletion7.2CNA v4.00.7%2025-10-09Fix
CVE-2025-32919Privilege escalation in Windows License plugin for Checkmk Windows agent8.8CNA v4.00.3%2025-10-09Fix
CVE-2025-32916Checkmk sensitive form data in URL query parameters1.0CNA v4.00.2%2025-10-09Fix
CVE-2025-27060Qualcomm Snapdragon untrusted pointer dereference in TZ firmware8.8CNA v3.10.1%2025-10-09Fix
CVE-2025-27059Qualcomm Snapdragon use of out-of-range pointer offset in TZ firmware8.8CNA v3.10.1%2025-10-09Fix
CVE-2025-27054Qualcomm Snapdragon out-of-bounds write in Display7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-27053Qualcomm Snapdragon incorrect calculation of buffer size in HLOS7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-27049Qualcomm Snapdragon buffer over-read in Camera5.5CNA v3.10.1%2025-10-09Fix
CVE-2025-27048Qualcomm Snapdragon untrusted pointer dereference in Camera7.8CNA v3.10.1%2025-10-09Fix
CVE-2025-27045Qualcomm Snapdragon buffer over-read in Video6.1CNA v3.10.1%2025-10-09Fix
CVE-2025-27041Qualcomm Snapdragon buffer over-read in Video5.5CNA v3.10.1%2025-10-09Fix
CVE-2025-27040Qualcomm Snapdragon improper input validation in TZ firmware6.5CNA v3.10.1%2025-10-09Fix
CVE-2025-27039Qualcomm Snapdragon Detection of Error Condition without action in Computer Vision6.6CNA v3.10.1%2025-10-09Fix
CVE-2025-11573Denial of service issue in Amazon.IonDotnet8.7CNA v4.00.4%2025-10-09Fix
CVE-2025-11561Sssd: Sssd default kerberos configuration allows privilege escalation on ad-joined linux systems8.8CNA v3.10.8%2025-10-09Fix
CVE-2025-11558code-projects E-Commerce Website user_index_search.php SQL injection9.8NVD v3.10.5%2025-10-09
CVE-2025-11557Projectworlds Gate Pass Management System add-pass.php SQL injection9.8NVD v3.10.4%2025-10-09
CVE-2025-11556code-projects Simple Leave Manager user.php SQL injection9.8NVD v3.10.5%2025-10-09
CVE-2025-11555Campcodes Online Learning Management System calendar_of_events.php SQL injection9.8NVD v3.10.4%2025-10-09
CVE-2025-11554Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions8.8NVD v3.10.4%2025-10-09Exploit code
CVE-2025-11553code-projects Courier Management System add-courier.php SQL injection9.8NVD v3.10.4%2025-10-09
CVE-2025-11552code-projects Online Complaint Site category.php SQL injection8.8NVD v3.10.4%2025-10-09
CVE-2025-11551code-projects Student Result Manager Database.java SQL injection9.8NVD v3.10.4%2025-10-09
CVE-2025-11550Tenda W12 HTTP request modules wifiScheduledSet null pointer dereference7.1CNA v4.01.0%2025-10-09Emerging Threats
CVE-2025-11549Tenda W12 HTTP request modules wifiMacFilterSet stack-based overflow9.8NVD v3.18.5%2025-10-09Emerging Threats
CVE-2025-11539Arbitrary code execution in Grafana Image Renderer plugin9.9CNA v3.10.6%2025-10-09Fix
CVE-2025-11530code-projects Online Complaint Site state.php SQL injection8.8NVD v3.10.4%2025-10-09
CVE-2025-11529ChurchCRM API Endpoint AuthMiddleware.php AuthMiddleware missing authentication9.8v3.10.5%2025-10-09
CVE-2025-11528Tenda AC7 saveAutoQos stack-based overflow8.7CNA v4.00.8%2025-10-09
CVE-2025-11527Tenda AC7 fast_setting_pppoe_set stack-based overflow8.7CNA v4.00.8%2025-10-09
CVE-2025-11526Tenda AC7 WifiMacFilterSet stack-based overflow8.7CNA v4.00.8%2025-10-09
CVE-2025-11525Tenda AC7 SetUpnpCfg stack-based overflow8.7CNA v4.01.0%2025-10-09
CVE-2025-11524Tenda AC7 SetDDNSCfg stack-based overflow8.7CNA v4.01.0%2025-10-09
CVE-2025-11523Tenda AC7 AdvSetLanip command injection8.8NVD v3.13.7%2025-10-09
CVE-2025-11522Search and Go - Directory WordPress theme authentication bypass to privilege escalation9.8CNA v3.10.6%2025-10-09Fix
CVE-2025-11516code-projects Online Complaint Site complaint-details.php SQL injection8.8NVD v3.10.4%2025-10-09
CVE-2025-11515code-projects Online Complaint Site register-complaint.php SQL injection8.8NVD v3.10.4%2025-10-09
CVE-2025-11514code-projects Online Complaint Site index.php SQL injection8.8NVD v3.10.4%2025-10-09
CVE-2025-11513code-projects E-Commerce Website supplier_update.php SQL injection9.8NVD v3.10.5%2025-10-09
CVE-2025-11512code-projects Voting System voters_add.php cross-site scripting6.1NVD v3.10.4%2025-10-09
CVE-2025-11371Gladinet CentreStack and Triofox files or directories accessible to external parties7.5CISA ADP v3.192.1%2025-10-09KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-11340Incorrect authorization in GitLab7.7CNA v3.10.4%2025-10-09Fix
CVE-2025-11198Juniper Networks Security Director Policy Enforcer missing authentication8.5CNA v4.00.3%2025-10-09Fix
CVE-2025-11166WP Go Maps WordPress plugin cross-site request forgery to plugin settings update5.4CNA v3.10.2%2025-10-09Fix
CVE-2025-10862Popup builder with Gamification WordPress plugin SQL injection7.5CNA v3.10.4%2025-10-09Fix
CVE-2025-10586Community Events WordPress plugin unauthenticated SQL injection9.8CNA v3.10.5%2025-10-09Fix
CVE-2025-10496Cookie Notice and Consent WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2025-10-09Fix
CVE-2025-10284BLSOPS bbot Improper Archive Extraction in unarchive enables RCE9.6CNA v3.10.7%2025-10-09Fix
CVE-2025-10283BLSOPS bbot improper .git Sanitization in gitdumper enables RCE9.6CNA v3.10.5%2025-10-09Fix
CVE-2025-10282BLSOPS bbot GitLab Domain Confusion in gitlab leaks API key4.7CNA v3.10.2%2025-10-09Fix
CVE-2025-10281BLSOPS bbot Insecure URL Handling in git_clone leading to Leaked API Key4.7CNA v3.10.2%2025-10-09Fix
CVE-2025-10249Slider Revolution WordPress plugin missing authorization authenticated arbitrary file read6.5CNA v3.10.4%2025-10-09Fix
CVE-2025-10240Progress Software Flowmon web application cross-site scripting8.8CNA v3.10.3%2025-10-09Fix
CVE-2025-10239Unintended command execution via troubleshooting scripts in Progress Flowmon7.2CNA v3.10.4%2025-10-09Fix
CVE-2025-10004Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.5%2025-10-09Fix
CVE-2025-9371Betheme WordPress theme authenticated (Contributor+) stored cross-site scripting via page_title6.4CNA v3.10.2%2025-10-09Fix
CVE-2025-7634WP Travel Engine WordPress plugin local file inclusion9.8CNA v3.10.8%2025-10-09Fix
CVE-2025-7526WP Travel Engine Tour Booking Plugin Tour Operator Software WordPress plugin arbitrary file deletion9.8CNA v3.10.9%2025-10-09Fix
CVE-2025-6038Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress privilege escalation8.8CNA v3.10.3%2025-10-09Fix
CVE-2025-4615PAN-OS: Improper neutralization of Input in the Management Web interface5.4CNA v4.00.8%2025-10-09Exploit codeFix
CVE-2025-4614PAN-OS: Session token disclosure4.8CNA v4.00.3%2025-10-09Fix
CVE-2025-2934Allocation of resources without limits or throttling in GitLab4.3CNA v3.10.5%2025-10-09Fix
CVE-2025-61999OPEXUS FOIAXpress stored XSS via logo image4.8NVD v3.10.2%2025-10-08Fix
CVE-2025-61998OPEXUS FOIAXpress stored XSS via Hyperlink Manager4.8NVD v3.10.2%2025-10-08Fix
CVE-2025-61997OPEXUS FOIAXpress stored XSS via banner image4.8NVD v3.10.2%2025-10-08Fix
CVE-2025-61996OPEXUS FOIAXpress stored XSS via annual report template4.8NVD v3.10.2%2025-10-08Fix
CVE-2025-61913Flowise is vulnerable to arbitrary file read, arbitrary file write10.0CNA v3.113.0%2025-10-08Fix
CVE-2025-61906Opencast's editor accidentally publishes videos/overwrites publications #16262.3CNA v4.00.3%2025-10-08Fix
CVE-2025-61788Opencast Paella Player 7 vulnerable to cross-site-scripting5.1CNA v4.00.2%2025-10-08Fix
CVE-2025-61787Deno is vulnerable to command injection on Windows during Batch File Execution8.1CNA v3.12.1%2025-10-08Fix
CVE-2025-61786Deno's --deny-read check does not prevent permission bypass3.3CNA v3.10.2%2025-10-08Fix
CVE-2025-61785Deno's --deny-write check does not prevent permission bypass3.3CNA v3.00.2%2025-10-08Fix
CVE-2025-61672Synapse: Invalid device keys degrade federation functionality5.3CNA v4.00.5%2025-10-08Fix
CVE-2025-61524Casdoor is vulnerable to improper authorization7.2CISA ADP v3.10.7%2025-10-08Fix
CVE-2025-61183VaahCMS is vulnerable to XSS through its Avatar upload endpoint6.1CISA ADP v3.10.3%2025-10-08
CVE-2025-60834ghostxbh uzy-ssm-mall fastjson deserialization of untrusted data6.5CISA ADP v3.10.4%2025-10-08
CVE-2025-60833ghostxbh uzy-ssm-mall /mall/wxpay/pay component XML external entity injection6.5CISA ADP v3.10.4%2025-10-08
CVE-2025-60830Redragon-erp deserialization of untrusted data6.5CISA ADP v3.10.4%2025-10-08
CVE-2025-608285kcrm WukongCRM deserialization of untrusted data6.5CISA ADP v3.10.4%2025-10-08
CVE-2025-60318Mayuri K Pet Grooming Management Software cross-site scripting6.1CISA ADP v3.10.2%2025-10-08
CVE-2025-60314Configuroweb Simple Web Inventory System cross-site scripting5.4CISA ADP v3.10.3%2025-10-08
CVE-2025-60313Rems Link Status Checker cross-site scripting6.1CISA ADP v3.10.4%2025-10-08
CVE-2025-60311Projectworlds Gym Management System SQL injection8.8CISA ADP v3.10.4%2025-10-08
CVE-2025-60299xxyopen Novel-Plus cross-site scripting5.4CISA ADP v3.10.2%2025-10-08
CVE-2025-60298xxyopen Novel-Plus cross-site scripting5.4CISA ADP v3.10.3%2025-10-08
CVE-2025-59303HAProxy Kubernetes Ingress Controller incomplete filtering6.4CNA v3.10.3%2025-10-08Fix
CVE-2025-57457Admin panel in Curo UC300 OS command injection8.8CISA ADP v3.11.0%2025-10-08
CVE-2025-53967Framelink Figma MCP Server unprotected alternate channel8.0CNA v3.15.8%2025-10-08Fix
CVE-2025-48981CompuGroup Medical CGM MEDICO missing encryption8.6CISA ADP v3.10.1%2025-10-08Fix
CVE-2025-48464DuckDuckGo Browser exposure of sensitive information4.7CNA v3.10.1%2025-10-08
CVE-2025-43830Liferay Portal is vulnerable to stored XSS through forms text type field5.1CNA v4.00.2%2025-10-08Fix
CVE-2025-43829Liferay Portal Commerce Shop is vulnerable to stored XSS through SVG file4.8CNA v4.00.2%2025-10-08Fix
CVE-2025-43821Liferay Portal is vulnerable to XSS through its Commerce Product's Name text field4.8CNA v4.00.2%2025-10-08Fix
CVE-2025-43771Liferay Portal Notifications widget has multiple XSS vulnerabilities through various text fields4.8CNA v4.00.2%2025-10-08Fix
CVE-2025-43724Dell PowerScale OneFS insecure direct object reference4.4CNA v3.10.1%2025-10-08Fix
CVE-2025-42706CrowdStrike Falcon sensor for Windows logic error6.5CNA v3.10.2%2025-10-08Fix
CVE-2025-42701CrowdStrike Falcon sensor for Windows race condition5.6CNA v3.10.1%2025-10-08Fix
CVE-2025-36636Tenable Security Center improper access control4.3CNA v3.10.2%2025-10-08Fix
CVE-2025-11535MongoDB Connector for BI installation MSI leave ACLs unset on custom installation directories8.8CNA v4.00.1%2025-10-08
CVE-2025-11511code-projects E-Commerce Website supplier_add.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11509code-projects E-Commerce Website product_add.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11508code-projects Voting System voters_add.php unrestricted upload9.8NVD v3.10.4%2025-10-08
CVE-2025-11507PHPGurukul Beauty Parlour Management System search-invoices.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11506PHPGurukul Beauty Parlour Management System search-appointment.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11505PHPGurukul Beauty Parlour Management System new-appointment.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11503PHPGurukul Beauty Parlour Management System manage-services.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11495GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow5.5NVD v3.10.2%2025-10-08Fix
CVE-2025-11494GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds5.5NVD v3.10.2%2025-10-08Fix
CVE-2025-11491wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection9.8NVD v3.14.3%2025-10-08
CVE-2025-11490wonderwhy-er DesktopCommanderMCP absolute path handler OS command injection9.8NVD v3.13.5%2025-10-08
CVE-2025-11489wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink7.0NVD v3.10.2%2025-10-08
CVE-2025-11488D-Link DIR-852 HNAP1 command injection6.9CNA v4.01.6%2025-10-08Emerging Threats
CVE-2025-11487SourceCodester Farm Management System uploadProduct.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11486SourceCodester Farm Management System buyNow.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11485SourceCodester Student Grades Management System Manage Users admin.php add_user cross-site scripting4.8NVD v3.10.3%2025-10-08
CVE-2025-11481varunsardana004 Blood-Bank-And-Donation-Management-System donate_blood.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11480SourceCodester Simple E-Commerce Bookstore register.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11479SourceCodester Wedding Reservation Management System function.php insertReservation SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11478SourceCodester Farm Management System myCart.php SQL injection8.8NVD v3.10.3%2025-10-08
CVE-2025-11477SourceCodester Wedding Reservation Management System global.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11476SourceCodester Simple E-Commerce Bookstore index.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11475Projectworlds Advanced Library Management System view_member.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11474SourceCodester Hotel and Lodge Management System edit_booking.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11473SourceCodester Hotel and Lodge Management System edit_curr.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11472SourceCodester Hotel and Lodge Management System edit_room.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11471SourceCodester Hotel and Lodge Management System edit_customer.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11470SourceCodester Hotel and Lodge Management System manage_website.php unrestricted upload7.2NVD v3.10.5%2025-10-08
CVE-2025-11469SourceCodester Hotel and Lodge Management System save_customer.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11445Kilo Code Prompt ClineProvider.ts ClineProvider injection5.3CNA v4.00.3%2025-10-08
CVE-2025-11444TOTOLINK N600R HTTP request cstecgi.cgi setWiFiBasicConfig buffer overflow8.7CNA v4.01.0%2025-10-08Emerging Threats
CVE-2025-11443JhumanJ OpnForm Forgotten Password email information exposure5.9NVD v3.10.6%2025-10-08
CVE-2025-11442JhumanJ OpnForm API endpoint cross-site request forgery5.3CNA v4.00.3%2025-10-08
CVE-2025-11441JhumanJ OpnForm HTTP header excessive authentication6.3CNA v4.00.6%2025-10-08
CVE-2025-11440JhumanJ OpnForm edit access control5.3CNA v4.00.4%2025-10-08
CVE-2025-11439OpnForm integrations page missing authorization5.3CNA v4.00.4%2025-10-08
CVE-2025-11438JhumanJ OpnForm API endpoint custom-domains authorization5.3CNA v4.00.3%2025-10-08
CVE-2025-11437JhumanJ OpnForm Form Editor forms cross-site scripting4.8NVD v3.10.3%2025-10-08
CVE-2025-11436JhumanJ OpnForm answer unrestricted upload8.8NVD v3.10.4%2025-10-08
CVE-2025-11435JhumanJ OpnForm submissions cross-site scripting6.1NVD v3.10.4%2025-10-08
CVE-2025-11434itsourcecode Student Transcript Processing System login.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11433itsourcecode Leave Management System Query parameter controller.php redirect cross-site scripting6.1NVD v3.10.3%2025-10-08
CVE-2025-11432itsourcecode Leave Management System reset.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11431code-projects Web-Based Inventory and POS System transaction.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11430SourceCodester Simple E-Commerce Bookstore cart.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11426Projectworlds Advanced Library Management System edit_book.php unrestricted upload8.8NVD v3.10.3%2025-10-08
CVE-2025-11425Projectworlds Advanced Library Management System edit_admin.php cross-site scripting4.8NVD v3.10.3%2025-10-08
CVE-2025-11424code-projects Web-Based Inventory and POS System login.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11423Tenda CH22 SafeEmailFilter formSafeEmailFilter memory corruption9.3CNA v4.00.9%2025-10-08
CVE-2025-11422Campcodes Advanced Online Voting Management System login.php SQL injection9.8NVD v3.10.5%2025-10-08
CVE-2025-11421code-projects Voting System candidates_edit.php cross-site scripting5.4NVD v3.10.3%2025-10-08
CVE-2025-11420code-projects E-Commerce Website edit_order_details.php SQL injection9.8NVD v3.10.4%2025-10-08
CVE-2025-11418Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow9.3CNA v4.06.7%2025-10-08Emerging Threats
CVE-2025-11417Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload8.8NVD v3.10.3%2025-10-08
CVE-2025-11204RegistrationMagic WordPress plugin SQL injection7.2CNA v3.10.4%2025-10-08Fix
CVE-2025-11171Chartify WordPress Chart plugin missing authentication for Administrative function5.3CNA v3.10.4%2025-10-08Exploit codeFix
CVE-2025-10649Welcart e-Commerce WordPress plugin authenticated (Author+) SQL injection via Cookie6.5CNA v3.10.3%2025-10-08Fix
CVE-2025-10635Find Me On WordPress plugin Subscriber+ SQL injection7.7CISA ADP v3.10.3%2025-10-08
CVE-2025-10587Community Events WordPress plugin unauthenticated SQL injection9.8CNA v3.10.4%2025-10-08Fix
CVE-2025-10494Motors Car Dealership and Classified Listings WordPress plugin arbitrary file deletion8.1CNA v3.10.5%2025-10-08Fix
CVE-2025-10353Missing authorization vulnerability in Melis Platform9.3CNA v4.02.7%2025-10-08NucleiExploit codeFix
CVE-2025-10352Missing authorization vulnerability in Melis Platform9.3CNA v4.00.3%2025-10-08Exploit codeFix