CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 7800 firmware +36 more +38 moreUse After Free in DSP Service7.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +26 more +28 moreInteger Overflow or Wraparound in DSP Service7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreUse of Out-of-range Pointer Offset in DSP Service7.8 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +35 more +37 moreStack-based Buffer Overflow in Automotive Software platform based on QNX7.8 High
- qualcomm qcc5161 firmware, qcc7225 firmware, qcc7226 firmware +6 more +8 moreUse After Free in BT Controller7.1 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +29 more +31 moreBuffer Copy Without Checking Size of Input in Camera7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreOut-of-bounds Write in DSP Service7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreUntrusted Pointer Dereference in DSP Service7.8 High
- qualcomm immersive home 214 platform firmware, immersive home 216 platform firmware, immersive home 316 platform firmware +23 more +25 moreUntrusted Pointer Dereference in TZ Firmware8.8 High
- qualcomm immersive home 214 platform firmware, immersive home 216 platform firmware, immersive home 316 platform firmware +23 more +25 moreUse of Out-of-range Pointer Offset in TZ Firmware8.8 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +297 more +299 moreOut-of-bounds Write in Display7.8 High
- qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 moreIncorrect Calculation of Buffer Size in HLOS7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +29 more +31 moreBuffer Over-read in Camera5.5 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreUntrusted Pointer Dereference in Camera7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreBuffer Over-read in Video6.1 Medium
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +61 more +63 moreBuffer Over-read in Video5.5 Medium
- qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +63 more +65 moreImproper Input Validation in TZ Firmware6.5 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sxr2230p firmware +7 more +9 moreDetection of Error Condition Without Action in Computer Vision6.6 Medium
- churchcrmChurchCRM API Endpoint AuthMiddleware.php AuthMiddleware missing authentication6.9 Medium
- tenda ac7, ac7 firmware +1 moreTenda AC7 saveAutoQos stack-based overflow8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 fast_setting_pppoe_set stack-based overflow8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 WifiMacFilterSet stack-based overflow8.7 High
- christophrado cookie notice & consentCookie Notice & Consent <= 1.6.5 - Unauthenticated Stored Cross-Site Scripting7.2 High
- wpgmaps wp go maps (formerly wp google maps)WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update5.4 Medium
- jackdewey community eventsCommunity Events <= 1.5.1 - Unauthenticated SQL Injection9.8 Critical
- tenda ac7, ac7 firmware +1 moreTenda AC7 SetUpnpCfg stack-based overflow8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 SetDDNSCfg stack-based overflow8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 AdvSetLanip command injection5.3 Medium
- code-projects online complaint sitecode-projects Online Complaint Site complaint-details.php sql injection5.3 Medium
libwebpOSS-FuzzUNKNOWN WRITE in RescalerImportRowExpand_SSE2No score- code-projects online complaint sitecode-projects Online Complaint Site register-complaint.php sql injection5.3 Medium
- code-projects online complaint sitecode-projects Online Complaint Site index.php sql injection5.3 Medium
- dlink dir-816 firmwareD-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the...7.5 High
- No product listedCross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on last_heard_page.php component6.1 Medium
- No product listedThe authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login...7.3 High
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin...9.4 Critical
- fabian simple scheduling systemcode-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- fabian client details systemcode-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding...6.1 Medium
- bestfeng xckkIn xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list...6.5 Medium
- bestfeng xckkIn xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address...6.5 Medium
- bestfeng xckkIn xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list...6.5 Medium
- No product listedA cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10...9.6 Critical
- webkul bagistoAn issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart...6.5 Medium
- No product listedLavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3...7.3 High
- google chromeUse after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to...8.1 High
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website supplier_update.php sql injection6.9 Medium
- code-projects voting systemcode-projects Voting System voters_add.php cross site scripting5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website supplier_add.php sql injection5.3 Medium
- flowiseai flowiseFlowise is vulnerable to arbitrary file read, arbitrary file write10.0 Critical
- Show moreLoading…