CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- linux, linux kernel +1 moreclk: microchip: fix potential UAF in auxdev release callback7.8 High
- linux, linux kernel +1 moreaccel/qaic: Fix a leak in map_user_pages()5.5 Medium
- linux, linux kernel +1 moreplatform/x86: dell-sysman: Fix reference leak5.5 Medium
- linux, linux kernel +1 moreiommufd: Fix unpinning of pages when an access is present8.8 High
- linux, linux kernel +1 morefs: dlm: fix use after free in midcomms commit9.8 Critical
- linux, linux kernel +1 morescsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list7.8 High
- linux, linux kernel +1 moregfs2: Fix possible data races in gfs2_show_options()7.0 High
- linux, linux kernel +1 morenetfilter: conntrack: Avoid nf_ct_helper_hash uses after free7.8 High
- linux, linux kernel +1 morebtrfs: reject invalid reloc tree root keys with stack dump5.5 Medium
- linux, linux kernel +1 moresoc: aspeed: socinfo: Add kfree for kstrdup5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: mlme: fix null-ptr deref on failed assoc5.5 Medium
- linux, linux kernel +1 moretest_firmware: fix memory leak in test_firmware_init()5.5 Medium
- linux, linux kernel +1 moredrm/msm/dp: fix memory corruption with too many bridges7.8 High
- linux, linux kernel +1 moreiommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()5.5 Medium
- linux, linux kernel +1 moreiommu/mediatek: Check return value after calling platform_get_resource()5.5 Medium
- linux, linux kernel +1 moreclk: rockchip: Fix memory leak in rockchip_clk_register_pll()5.5 Medium
- linux, linux kernel +1 moremcb: mcb-parse: fix error handing in chameleon_parse_gdd()3.3 Low
- linux, linux kernel +1 moreplatform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()5.5 Medium
- linux, linux kernel +1 morenilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure5.5 Medium
- linux, linux kernel +1 moreparisc: Fix locking in pdc_iodc_print() firmware call7.8 High
- linux, linux kernel +1 moremm/huge_memory: do not clobber swp_entry_t during THP split7.8 High
- linux, linux kernel +1 moreusb: gadget: f_hid: fix refcount leak on error path5.5 Medium
- linux, linux kernel +1 morestaging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()5.5 Medium
- linux, linux kernel +1 moremedia: coda: Add check for kmalloc5.5 Medium
- rackRack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)7.5 High
- rackRack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)7.5 High
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System Profile profile.php unrestricted upload5.3 Medium
- hp, inc. hp sure start ifd protectionHP Sure Start IFD Protection - BIOS Security Update7.2 High
- rackRack's unbounded multipart preamble buffering enables DoS (memory exhaustion)7.5 High
- vllmvLLM vulnerable to timing attack at bearer auth7.5 High
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System login.php sql injection6.9 Medium
- elastic kibanaKibana Cross-Site Scripting (XSS)8.7 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreA format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet...8.8 High
- planet wgr-500, wgr-500 firmware +1 moreMultiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet...8.8 High
- elastic kibanaKibana Insufficiently Protected Credentials in the CrowdStrike Connector5.4 Medium
- openplc v3A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3...5.3 Medium
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8.1 +1 more +3 moreNodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict7.5 High
- abb eibport v3 knx, eibport v3 knx gsm +1 moreEIBPORT Reflected XSS8.5 High
- code-projects simple food ordering systemcode-projects Simple Food Ordering System product.php sql injection6.9 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.06.0 Medium
- hashgraph guardian, nozomi networks cmc +1 morePath traversal in Time Machine functionality in Guardian/CMC before 25.2.07.2 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.06.0 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.07.7 High
- Show moreLoading…