CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- No product listedA SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows...9.8 Critical
- No product listedThe BATBToken smart contract (address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler...9.1 Critical
- lion-coders salepro posA stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module of...6.1 Medium
- phpgurukul hostel management systemPhpgurukul Hostel Management System 2.1 is vulnerable to clickjacking.5.4 Medium
- gimpGIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findFileServerPage.do findFileServerPage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findDeptPage.do doFilter sql injection6.9 Medium
- vanderlande baggage 360Vanderlande Baggage 360 messages cross site scripting5.1 Medium
- qianfox foxcmsqianfox FoxCMS Search cross site scripting5.3 Medium
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G formTaskEdit strcpy buffer overflow8.7 High
- codecanyon mentor lmsCodeCanyon/ui-lib Mentor LMS API cross-domain policy5.3 Medium
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 mp command injection5.3 Medium
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formWpsStart buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formWlanSetupWPS buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formWlanMP buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formWanTcpipSetup buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formSetWanStatic command injection5.3 Medium
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formSetLanguage buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formPPTPSetup buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formPPPoESetup buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formL2TPSetup buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formConnectionSetting buffer overflow8.7 High
- belkin f9k1015, f9k1015 firmware +1 moreBelkin F9K1015 formBSSetSitesurvey command injection5.3 Medium
- ixmaps website2017ixmaps website2017 HTTP GET Request map.php cross site scripting5.3 Medium
- crmebCRMEB JWT HMAC Secret hard-coded key6.3 Medium
- westboy cicadascmswestboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting4.8 Medium
- allegroai allegroai/clearmlPath Traversal Leading to Remote Code Execution in allegroai/clearml5.8 Medium
- zenml, zenml-io zenml-io/zenml +1 morePath Traversal in zenml-io/zenml6.3 Medium
- crmebCRMEB GET Parameter product sql injection5.3 Medium
- mcphubsamanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication6.9 Medium
- mcphubsamanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery5.1 Medium
- mcphubsamanhappy MCPHub serverController.ts os command injection5.3 Medium
- zytec dalian zhuoyun technology central authentication serviceZytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password6.9 Medium
- frappe lms, learning +1 moreFrappe LMS Course cross site scripting4.8 Medium
- frappe lms, learning +1 moreFrappe LMS Unpublished Course courses access control2.3 Low
- frappe lms, learning +1 moreFrappe LMS Assignment Picture files direct request6.3 Medium
- oracle concurrent processing, e-business suite +1 moreVulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component:...9.8 Critical
- axosoft scrum and bug trackingAxosoft Scrum and Bug Tracking Add Work Item csv injection5.1 Medium
- allstarlink supermonAllStarLink Supermon AllMon2 cross site scripting5.3 Medium
- assimpOpen Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow4.8 Medium
- No product listedRebuild Comment/Guestbook cross site scripting5.1 Medium
- assimpOpen Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow4.8 Medium
libwebpOSS-FuzzUse-of-uninitialized-value in WebPCleanupTransparentAreaNo score- assimpOpen Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources4.8 Medium
- open-xchange gmbh ox dovecot proWhen cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key...7.4 High
- google chromeOut of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to...7.5 High
- lachatterie vergerLaChatterie Verger provider.ts redirectToAuthorization deserialization5.3 Medium
- seriawei zkeacmsSeriaWei ZKEACMS POST Request UrlRedirectionController.cs Delete improper authorization5.3 Medium
- linux, linux kernel +1 morejfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount7.8 High
- linux, linux kernel +1 moremm/ksm: fix race with VMA iteration and mm_struct teardown4.7 Medium
- Show moreLoading…