CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- haproxy kubernetes ingress controllerHAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is...6.4 Medium
- go html, golang.org/x/net golang.org/x/net/html +1 moreInfinite parsing loop in golang.org/x/net5.3 Medium
- go standard library crypto/tls, golang go +1 moreALPN negotiation error contains attacker controlled information in crypto/tls5.3 Medium
- go standard library crypto/x509, golang go +1 morePanic when validating certificates with DSA public keys in crypto/x5097.5 High
- go standard library crypto/x509, golang go +1 moreQuadratic complexity when checking name constraints in crypto/x5097.5 High
- go standard library net/httpLack of limit when parsing cookies can cause memory exhaustion in net/http5.3 Medium
- go standard library encoding/asn1, golang go +1 moreParsing DER payload can cause memory exhaustion in encoding/asn15.3 Medium
- go standard library archive/tarUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Medium
- No product listedAn OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows...8.8 High
- go standard library net/url, golang go +1 moreInsufficient validation of bracketed IPv6 hostnames in net/url5.3 Medium
- go html, golang.org/x/net golang.org/x/net/html +1 moreQuadratic parsing complexity in golang.org/x/net/html5.3 Medium
- campcodes advanced online voting management system, advanced online voting system +1 moreCampcodes Advanced Online Voting Management System voters_add.php unrestricted upload5.3 Medium
- opexus foiaxpressOPEXUS FOIAXpress stored XSS via logo image4.8 Medium
- opexus foiaxpressOPEXUS FOIAXpress stored XSS via Hyperlink Manager4.8 Medium
- opexus foiaxpressOPEXUS FOIAXpress stored XSS via banner image4.8 Medium
- opexus foiaxpressOPEXUS FOIAXpress stored XSS via annual report template4.8 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System invoices.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System customer-list.php sql injection6.9 Medium
- denoDeno's --deny-write check does not prevent permission bypass3.3 Low
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has multiple Stored XSS vulnerabilities on its View Order page4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to XSS through its Commerce Search Result widget4.8 Medium
vllmPyPIvLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server6.5 Medium- campcodes advanced online voting management system, advanced online voting system +1 moreCampcodes Advanced Online Voting Management System voters_add.php sql injection5.3 Medium
- campcodes advanced online voting management system, advanced online voting system +1 moreCampcodes Advanced Online Voting Management System index.php sql injection5.3 Medium
- d-link di-7001 mini, dlink di-7001mini-8g firmware +1 moreD-Link DI-7001 MINI dbsrv.asp buffer overflow8.7 High
- d-link di-7001 mini, dlink di-7001mini-8g firmware +1 moreD-Link DI-7001 MINI upgrade_filter.asp os command injection5.3 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- red hat ai inference server, enterprise linux ai (rhel ai) +1 moreVllm: server side request forgery (ssrf) in mediaconnector7.1 High
- aws client vpnLocal Privilege Escalation Vulnerability in AWS Client VPN macOS Client9.3 Critical
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- kaifangqian kaifangqian-basekaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosure5.3 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- nasa-jpl ion-dtnNASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Service7.5 High
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...7.5 High
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...2.3 Low
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...3.7 Low
- extreme networks fabric engine (voss), extremenetworks fabric engine \(voss\) +1 moreFabric Engine (VOSS) AutoSense Authentication Bypass8.4 High
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...4.3 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System del_tax.php sql injection5.3 Medium
- hiyouga llama-factoryLLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities7.6 High
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...4.4 Medium
- dependencytrack dependency-trackDependency-Track possibly discloses private NuGet repository credentials to api.nuget.org4.7 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...5.3 Medium
- bytecodealliance wasmtimeWasmtime has memory leak in C API with `externref` and `anyref` types1.0 Low
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...5.3 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...5.3 Medium
- Show moreLoading…