CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreAn out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreAn out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreAn out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::is_motion_tween of V-SFT v6...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreAn out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V...8.4 High
- hcl aionHCL AION is susceptible to Cacheable SSL Page Found vulnerability3.7 Low
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreAn out-of-bounds write vulnerability exists in VS6ComFile!set_AnimationItem of V-SFT v6.2.7.0 and...8.4 High
- hcl aionHCL AION is susceptible to Bypass of the script allow list configuration vulnerability5.4 Medium
- hcl aionHCL AION is susceptible to Trusted types in scripts not enforced in CSP3.7 Low
- fuji electric co., ltd. / hakko electronics co., ltd. v-sft, fujielectric monitouch v-sft +1 moreA stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of...8.4 High
- hcl aionHCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability6.5 Medium
- elastic elasticsearchElasticsearch Insertion of sensitive information in log file5.7 Medium
- hcl aionHCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability3.7 Low
- elastic kibanaKibana Stored Cross-Site Scripting (XSS)8.2 High
- apache streamparkApache StreamPark: Authenticated users can trigger remote command execution7.3 High
- elastic kibanaKibana Stored Cross-Site Scripting (XSS)8.7 High
- hcl aionHCL AION is susceptible to Spring Boot Actuator Endpoints Exposed3.7 Low
- hcl aionHCL AION is susceptible to Inline script execution allowed in CSP vulnerability8.2 High
- xibo signage cmsReflected Cross-Site Scripting (XSS) in CMS4.8 Medium
- xibo signage cmsStored Cross-Site Scripting (XSS) in CMS5.1 Medium
- hcl myxalyticsHCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.3.1 Low
- energycrm energy crmStored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to...7.1 High
- samsung notesOut-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local...4.0 Medium
- samsung notesOut-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63...4.0 Medium
- samsung notesOut-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63...4.0 Medium
- samsung notesOut-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63...4.0 Medium
- samsung notesOut-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local...4.0 Medium
- samsung mobile retail modeImproper input validation in Retail Mode prior to version 5.59.11 allows self attackers to...6.6 Medium
- samsung smart switchImproper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to...8.8 High
- samsung voice recorderImproper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and...4.6 Medium
- samsung smart switchUse of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows...7.8 High
- samsung smart switchCleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local...7.1 High
- samsung smart switchCleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local...5.5 Medium
- samsung healthImproper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to...6.2 Medium
- samsung mobile routinesImproper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android...7.3 High
- samsung notesUse of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows...4.3 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to...5.5 Medium
- samsung android, samsung mobile devices +1 moreRelative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to...5.2 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows...2.4 Low
- samsung wear os, samsung mobile devices +1 moreInsecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local...5.7 Medium
- unknown booking managerBooking Manager < 2.1.15 - Contributor+ Booking Deletion4.5 Medium
drupal-pattern-lab/unified-twig-extensionsPackagistdrupal-pattern-lab/unified-twig-extensions is vulnerable to XXS4.8 Medium- buffalo inc. nas navigator2 (windows version only)NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file...8.4 High
- Show moreLoading…