CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website product_add.php sql injection5.3 Medium
- code-projects voting systemcode-projects Voting System voters_add.php unrestricted upload5.1 Medium
- mongodb inc connector for biMongoDB Connector for BI installation MSI leave ACLs unset on custom installation directories8.8 High
- web developer for chrome developer for chromeWeb Developer for Chrome v0.4.9 Malicious Backdoor Supply Chain Compromise9.3 Critical
- piriform ccleaner, ccleaner cloud +1 moreCCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise9.3 Critical
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System search-invoices.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System search-appointment.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System new-appointment.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System manage-services.php sql injection6.9 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds4.8 Medium
- wonderwhy-er desktopcommandermcpwonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection5.3 Medium
- wonderwhy-er desktopcommandermcpwonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection5.3 Medium
- apereo opencastOpencast's editor accidentally publishes videos/overwrites publications #16262.3 Low
- apereo opencastOpencast Paella Player 7 vulnerable to Cross-Site-Scripting5.1 Medium
- wonderwhy-er desktopcommandermcpwonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink2.0 Low
- d-link dir-852D-Link DIR-852 HNAP1 command injection6.9 Medium
- janobe farm management systemSourceCodester Farm Management System uploadProduct.php sql injection5.3 Medium
- crowdstrike falcon sensor for windowsCrowdStrike Falcon Sensor for Windows Race Condition5.6 Medium
- crowdstrike falcon sensor for windowsCrowdStrike Falcon Sensor for Windows Logic Error6.5 Medium
- sonatype nexus repositoryNexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin8.7 High
- janobe farm management systemSourceCodester Farm Management System buyNow.php sql injection5.3 Medium
- remyandrade student grades management systemSourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting4.8 Medium
- abb mconfigApplication credential stored in clear text in memory5.7 Medium
- varunsardana004 blood-bank-and-donation-management-system, blood bank and donation management system +1 morevarunsardana004 Blood-Bank-And-Donation-Management-System donate_blood.php sql injection5.3 Medium
els-os-releaseTuxCareUpdate of els-os-releaseNo score- google geminiInformation Disclosure in Gemini iOS App1.0 Low
- tenable security centerImproper Access Control4.3 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user...4.4 Medium
- janobe simple e-commerce bookstoreSourceCodester Simple E-Commerce Bookstore register.php sql injection6.9 Medium
- janobe wedding reservation management systemSourceCodester Wedding Reservation Management System function.php insertReservation sql injection6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Notifications Widget has multiple XSS vulnerabilities through various text fields4.8 Medium
- janobe farm management systemSourceCodester Farm Management System myCart.php sql injection5.3 Medium
- janobe wedding reservation management systemSourceCodester Wedding Reservation Management System global.php sql injection6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Commerce Shop is vulnerable to Stored XSS through SVG file4.8 Medium
- janobe simple e-commerce bookstoreSourceCodester Simple E-Commerce Bookstore index.php sql injection6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to Stored XSS through Forms text type field5.1 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System view_member.php sql injection6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to XSS through its Commerce Product's Name text field4.8 Medium
fuel-vmcrates.ioFuelVM is vulnerable to heap memory allocation re-use bug8.7 High- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System edit_booking.php sql injection5.3 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System edit_curr.php sql injection6.9 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System edit_room.php sql injection6.9 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System edit_customer.php sql injection6.9 Medium
- nanbu welcart e-commerceWelcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie6.5 Medium
- melis technology platformMissing Authorization vulnerability in Melis Platform9.3 Critical
- melis technology platformMissing Authorization vulnerability in Melis Platform9.3 Critical
- melis technology platformSQL injection vulnerability in Melis Platform9.3 Critical
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System manage_website.php unrestricted upload5.1 Medium
- nikhil-bhalerao hotel and lodge management systemSourceCodester Hotel and Lodge Management System save_customer.php sql injection5.3 Medium
- Show moreLoading…