CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- blsops, llc bbotImproper Archive Extraction in unarchive Enables RCE9.6 Critical
- blsops, llc bbotImproper .git Sanitization in gitdumper Enables RCE9.6 Critical
- blsops, llc bbotGitLab Domain Confusion in gitlab Leaks API Key4.7 Medium
- blsops, llc bbotInsecure URL Handling in git_clone Leading to Leaked API Key4.7 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash6.0 Medium
- juniper junos os evolvedJunos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE6.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor7.0 High
- juniper junos os evolvedJunos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart7.1 High
- better-authBetter Auth: Unauthenticated API key creation through api-key plugin9.3 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash8.2 High
- juniper security director policy enforcerSecurity Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX Server8.5 High
- n8nn8n - Arbitrary Command Execution via Execute Command Node8.7 High
- pyloadpyLoad CNL and captcha handlers allow code Injection via unsanitized parameters8.1 High
vim-commonTuxCare,vim-enhancedTuxCare,vim-filesystemTuxCare +2 more +4 moreUpdate of vimNo score- checkmkPath-Traversal in report scheduler7.1 High
- checkmkPrivilege Escalation in Windows License plugin for Checkmk Windows Agent8.8 High
- checkmkSensitive form data in URL query parameters1.0 Low
aaa_baseSUSESecurity update for aaa_baseNo scorescio-pypiPyPIscio is vunerable to Remote Command Execution through PyTorch9.3 Critical- ibm aspera faspexIBM Aspera Faspex denial of service4.9 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure4.3 Medium
- ibm aspera faspexIBM Aspera Faspex cross-origin resource sharing5.3 Medium
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems8.8 High
- apache flink cdcApache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC: SQL injection via maliciously crafted identifiers5.1 Medium
- progress software flowmonPossibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application8.8 High
- progress software flowmonUnintended command execution via troubleshooting scripts in Progress Flowmon7.2 High
- linux, linux kernel +1 moreio_uring: fix incorrect io_kiocb reference in io_link_skb7.8 High
- linux, linux kernel +1 morerxrpc: Fix untrusted unsigned subtract7.5 High
- linux, linux kernel +1 moreiommu/amd/pgtbl: Fix possible race while increase page table level8.8 High
- linux, linux kernel +1 moregpiolib: acpi: initialize acpi_gpio_info struct7.3 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabIncorrect Authorization in GitLab7.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- muffingroup bethemeBetheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'6.4 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26,...8.8 High
- linux, linux kernel +1 moreASoC: amd: acp: Fix incorrect retrival of acp_chip_info5.5 Medium
- linux, linux kernel +1 moreiommu/s390: Make attach succeed when the device was surprise removed7.8 High
- linux, linux kernel +1 morewifi: mac80211: increase scan_ies_len for S1G7.1 High
- linux, linux kernel +1 moreigc: don't fail igc_probe() on LED setup error7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().7.8 High
- linux, linux kernel +1 moreclk: sunxi-ng: mp: Fix dual-divider clock rate readback5.5 Medium
- roxnor popup builder with gamification, multi-step popups, page-level targeting, and woocommerce triggersPopup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'7.5 High
- elated-themes search & go - directory wordpress themeSearch & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover9.8 Critical
- grafana grafana-image-rendererArbitrary Code Execution in Grafana Image Renderer Plugin9.9 Critical
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion9.8 Critical
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming9.8 Critical
- code-projects online complaint sitecode-projects Online Complaint Site state.php sql injection5.3 Medium
- pebas lisfinity core - lisfinity core plugin used for pebas® lisfinity wordpress themeLisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +25 more +27 moreOut-of-bounds Write in DSP Service7.8 High
- Show moreLoading…