CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- linux, linux kernel +1 morecxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()5.5 Medium
- linux, linux kernel +1 morememory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()5.5 Medium
- linux, linux kernel +1 morenilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()7.1 High
- linux, linux kernel +1 morentb_netdev: Use dev_kfree_skb_any() in interrupt context5.5 Medium
- linux, linux kernel +1 moremacintosh: fix possible memory leak in macio_add_one_device()5.5 Medium
- linux, linux kernel +1 morexen/gntdev: Accommodate VMA splitting5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecgroup: split cgroup_destroy_wq into 3 workqueues5.5 Medium
- linux, linux kernel +1 morewifi: wilc1000: avoid buffer overflow in WID string configuration8.8 High
- linux, linux kernel +1 moreum: virtio_uml: Fix use-after-free after put_device in probe7.8 High
- linux, linux kernel +1 morenet/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR5.5 Medium
- linux, linux kernel +1 moreqed: Don't collect too many protection override GRC elements7.8 High
- linux, linux kernel +1 moreice: fix Rx page leak on multi-buffer frames9.8 Critical
- linux, linux kernel +1 morenet/mlx5e: Harden uplink netdev access against device unbind5.5 Medium
- linux, linux kernel +1 moretls: make sure to abort the stream if headers are bogus9.8 Critical
- linux, linux kernel +1 morecnic: Fix use-after-free bugs in cnic_delete_task7.8 High
- linux, linux kernel +1 moreocteontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()7.8 High
- linux, linux kernel +1 moreksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer9.4 Critical
- linux, linux kernel +1 moreksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size7.5 High
- linux, linux kernel +1 morezram: fix slot write race condition7.8 High
- linux, linux kernel +1 moredm-stripe: fix a possible integer overflow5.5 Medium
- linux, linux kernel +1 moreiommu/s390: Fix memory corruption when using identity domain7.8 High
- linux, linux kernel +1 moreASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed5.5 Medium
- linux, linux kernel +1 morenet: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked()5.5 Medium
- linux, linux kernel +1 moreASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded()7.8 High
- linux, linux kernel +1 moredrm: bridge: anx7625: Fix NULL pointer dereference with early IRQ5.5 Medium
- linux, linux kernel +1 moresmb: client: let recv_done verify data_offset, data_length and remaining_data_length9.4 Critical
- linux, linux kernel +1 moresmb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - Set merge to zero early in af_alg_sendmsg7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresmb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path7.5 High
- sergiotrinity trinity audio – text to speech ai audio player to convert content into audioTrinity Audio <= 5.20.2 - Cross-Site Request Forgery4.3 Medium
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- sergiotrinity trinity audio – text to speech ai audio player to convert content into audioTrinity Audio <= 5.20.2 - Reflected Cross-Site Scripting6.1 Medium
- posimyththemes wdesignkit – elementor & gutenberg starter templates, patterns, cloud workspace & widget builderWDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function4.3 Medium
- cyberlord92 oauth single sign on – sso (oauth client)OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()9.8 Critical
- maneshtimilsina majestic before after imageMajestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association5.3 Medium
- stylemix cost calculator builderCost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions8.1 High
- cyberlord92 integrate dynamics 365 crmIntegrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization6.5 Medium
- opajaap wp photo album plusWP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload5.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure6.5 Medium
- macenhance macforgeMacForge 1.2.0 Beta 1 - Local Privilege Escalation8.5 High
libwebpOSS-FuzzUse-of-uninitialized-value in WebPMultRow_CNo score- fetchmailIn fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334...5.9 Medium
- flowiseai flowiseFlowise Stored XSS vulnerability through logs in chatbot8.2 High
- flowiseai flowiseDuplicate Advisory: Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel8.2 High
- xuemian168 kunoKuno is Vulnerable to Stored XSS Attack via SVG File Upload5.4 Medium
- jaketcooper minecraft-rconMinecraft RCON Terminal: Plain Text Password Storage in Configuration6.6 Medium
- julien040 anyqueryAnyquery Unauthenticated Access Vulnerability Exposes Private Integration Data7.7 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal exposes sensitive user data through its Freemarker template4.6 Medium
- Show moreLoading…