CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- newforma project centerNewforma Project Center Server (NPCS) .NET unauthenticated deserialization7.7 High
- newforma project centerNewforma Info Exchange (NIX) .NET unauthenticated deserialization9.3 Critical
- portabilis i-educarPortabilis i-Educar User Type AccessLevelController.php insecure inherited permissions5.3 Medium
- carmelogarcia courier management systemcode-projects Courier Management System add-courier.php sql injection5.3 Medium
- code-projects online complaint sitecode-projects Online Complaint Site category.php sql injection5.3 Medium
- quantumnous new-apiNew API has Authenticated Server-Side Request Forgery (SSRF) issue8.5 High
- bigbluebuttonBigBlueButton vulnerable to Stored XSS via name of user at Shared Notes7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Improper Neutralization of Input in the Management Web Interface5.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Token Disclosure Vulnerability4.8 Medium
- carmelo student result managercode-projects Student Result Manager Database.java sql injection5.3 Medium
- tenda w12, w12 firmware +1 moreTenda W12 HTTP Request modules wifiScheduledSet null pointer dereference7.1 High
- amazon amazon.iondotnetDenial of Service issue in Amazon.IonDotnet8.7 High
- python-social-auth social-app-djangoPython Social Auth - Django has unsafe account association6.3 Medium
- tenda w12, w12 firmware +1 moreTenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow8.7 High
- netsarang computer, inc. xftp, xlpd, xmanager +2 more +4 moreNetSarang v5.0 Malicious Backdoor Supply Chain Compromise9.3 Critical
- gladinet centrestack, centrestack and triofox, triofox +2 moreGladinet CentreStack and TrioFox Local File Inclusion Flaw7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Device allows login for user with expired password5.3 Medium
- juniper junos spaceJunos Space: CLI Configlet page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos os evolvedJunos OS Evolved: OS command injection vulnerabilities fixed4.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash8.7 High
- juniper junos spaceJunos Space: Template Definitions page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Create Quick Template page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Generate Report page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: API Access Profiles page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Archive Logs screen is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Configuration View page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Template creation through Definition is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Quick Template page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Secure Console page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Device Management pages are vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Template creation pages are vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Device Discovery page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Generate Report page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Purging Policy field is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Global Search is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Template Definition page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Dashboard Search field is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos spaceJunos Space: Device Template Definition page is vulnerable to reflected cross-site script injection5.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed6.9 Medium
- juniper junos spaceJunos Space: Stored cross-site scripting vulnerability in web application9.4 Critical
- juniper junos spaceJunos Space: Arbitrary file download vulnerability in web interface7.1 High
- juniper junos spaceJunos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS8.7 High
- juniper space security director, juniper networks junos space security director +1 moreJunos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability9.3 Critical
- juniper space security director, juniper networks junos space security director, junos os +2 moreJunos Space Security Director: Insufficient authorization for sensitive resources in web interface7.7 High
- juniper junos os evolvedJunos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and r…7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart8.7 High
- Show moreLoading…