CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- tenda ac18, ac18 firmware +1 moreTenda AC18 fast_setting_pppoe_set stack-based overflow8.7 High
- sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 moreSensitive Information Disclosure Through Missing Authentication5.3 Medium
- sick baggage analytics, enterprise analytics, logistic diagnostic analytics +2 more +4 morePlain Text Transmission of Username and Password in the URL5.3 Medium
- sick enterprise analyticsUser Enumeration5.3 Medium
- sick enterprise analyticsUncontrolled Resource Consumption via log file5.3 Medium
- sick enterprise analyticsInformation Disclosure Through Stacktrace-/MQTT/Config/changeAll4.3 Medium
- sick enterprise analyticsInjection via log file6.5 Medium
- sick enterprise analyticsUnlimited user creation by authorized users3.8 Low
- sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 moreThe credentials of the users stored in the system's local database can be used for the log in,...4.3 Medium
- sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 moreCross Site Scripting: Session Hijacking4.5 Medium
- tenda ac18, ac18 firmware +1 moreTenda AC18 setNotUpgrade stack-based overflow8.7 High
- utt 1250gw, 1250gw firmware +1 moreUTT 1250GW formUserStatusRemark strcpy buffer overflow8.7 High
- unknown responsive lightbox & galleryResponsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments6.3 Medium
- unknown ultimate addons for elementor (formerly elementor header & footer builder)Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS4.3 Medium
- mangati novosgaMangati NovoSGA User Creation new weak password6.3 Medium
- denso ten limited. multiple installers of denso ten drive recorder viewerThe installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path,...8.4 High
- zhuimengshaonian wisdom-educationzhuimengshaonian wisdom-education WrongBookController.java authorization5.3 Medium
- zhuimengshaonian wisdom-educationzhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload5.3 Medium
- nahiduddinahammed hospital-management-system-websitenahiduddinahammed Hospital-Management-System-Website delete.php sql injection5.3 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 uploadWxFile.do unrestricted upload6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findSingConfigPage.do findRolePage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findCategoryPage.do findCategoryPage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findUserPage.do findUserPage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findSingConfigPage.do findRolePage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findRolePage.do findRolePage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findModulePage.do findModulePage sql injection6.9 Medium
- tipray data leakage prevention system, tipray 厦门天锐科技股份有限公司 data leakage prevention system 天锐数据泄露防护系统 +1 moreTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findTenantPage.do findTenantPage sql injection6.9 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moressh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...3.6 Low
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moressh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...3.6 Low
dokuwikiDebianCross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote...6.5 Medium- No product listedA stored cross-site scripting (XSS) vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750...5.4 Medium
- No product listedAn issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio...8.9 High
- endruntechnologies sonoma d12 firmwareDirectory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W...5.7 Medium
- endruntechnologies sonoma d12 firmwareCross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server ...7.3 High
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...9.1 Critical
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...9.1 Critical
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...8.2 High
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...8.2 High
- endruntechnologies sonoma d12 firmwareCross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server ...6.1 Medium
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...8.2 High
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...8.2 High
- endruntechnologies sonoma d12 firmwareCross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server ...7.3 High
- endruntechnologies sonoma d12 firmwareOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F...9.9 Critical
- endruntechnologies sonoma d12 firmwareCross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time...8.0 High
- yosmart yolink apiThe YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's...5.8 Medium
- yosmart yolink applicationThe YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long...3.5 Low
- yosmart yolink smart hubThe YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used...4.3 Medium
- yosmart yolink mqtt brokerThe YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization...4.9 Medium
- yosmart yolink ecosystemComponents of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to...4.7 Medium
- yosmart yolink smart hubThe YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct...2.2 Low
- Show moreLoading…