CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- tomofun furbo 360, furbo 360 dog camera firmware +1 moreTomofun Furbo 360 Account server-side request forgery6.3 Medium
- tomofun furbo 360, furbo 360 dog camera firmware +1 moreTomofun Furbo 360 File Upload resource consumption5.3 Medium
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next data modification3.5 Low
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next security bypass3.5 Low
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next spoofing5.7 Medium
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next denial of service6.5 Medium
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini UART information disclosure2.4 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation6.3 Medium
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured security related HTTP headers3.5 Low
- docsys project docsysRainyGao DocSys deleteDoc.do path traversal5.3 Medium
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability3.5 Low
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)4.0 Medium
- docsys project docsysRainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversal5.3 Medium
- docsys project docsysRainyGao DocSys getUserList.do getUserList sql injection5.3 Medium
- hcl software maxai assistantHCL MaxAI Assistant is susceptible to a HTML injection vulnerability4.6 Medium
- jimit105 project-online-shopping-websitejimit105 Project-Online-Shopping-Website Product Inventory delete.php sql injection5.1 Medium
- ancorathemes unicaHCL Unica 12.1.10 is affected by an exposure of sensitive information5.3 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information3.5 Low
- oracle configurator, e-business suite +1 moreVulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime...7.5 High
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)4.2 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)3.5 Low
- mayurik best salon management systemSourceCodester Best Salon Management System add_invoice.php sql injection6.9 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System edit-appointment.php sql injection6.9 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System addcategory.php sql injection5.3 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System addproduct.php sql injection5.3 Medium
- codeastro simple inventory systemSourceCodester Simple Inventory System user.php sql injection5.3 Medium
- codeastro simple inventory systemSourceCodester Simple Inventory System brand.php sql injection5.3 Medium
- code-projects hospital management systemcode-projects Hospital Management System express-session hard-coded key6.3 Medium
- code-projects e-banking system, fabian simple e-banking system +1 morecode-projects E-Banking System POST Parameter register.php sql injection6.9 Medium
- harry0703 moneyprinterturboharry0703 MoneyPrinterTurbo API Endpoint music.py upload_music path traversal5.3 Medium
- ipynch social network websiteiPynch Social Network Website Search sql injection5.3 Medium
- code-projects client details systemcode-projects Client Details System update-profile.php sql injection5.3 Medium
- projectworlds online ordering food system, online food ordering system +1 moreprojectworlds Online Ordering Food System all-orders.php sql injection6.9 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System editproduct.php sql injection5.3 Medium
- oretnom23 online student result systemSourceCodester Online Student Result System login.php sql injection6.9 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System editcategory.php sql injection5.3 Medium
- campcodes online apartment visitor management systemCampcodes Online Apartment Visitor Management System forgot-password.php sql injection6.9 Medium
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website product_add_qty.php sql injection5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website delete_order_details.php sql injection6.9 Medium
- campcodes online apartment visitor management systemCampcodes Online Apartment Visitor Management System admin-profile.php sql injection5.1 Medium
- ercbs course redirects for learndash pluginCourse Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery4.3 Medium
- accessibe web accessibility by accessibeWeb Accessibility By accessiBe <= 2.10 - Cross-Site Request Forgery4.3 Medium
- miksco wordpress live webcam widget & shortcodeWordPress Live Webcam Widget & Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- kunal nagar custom 404 proCustom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter4.9 Medium
- westerndeal gsheetconnector for gravity forms – send gravity forms entries to google sheets in real-timeGSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation2.4 Low
- westerndeal gsheetconnector for gravity forms – send gravity forms entries to google sheets in real-timeGSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation8.8 High
- nickclarkweb code quality control toolCode Quality Control Tool <= 2.1 - Unauthenticated Information Exposure via Log Files5.3 Medium
- rico-macchi wp links pageWP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection6.5 Medium
- bestwebsoft error log viewer by bestwebsoftError Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read4.9 Medium
- themeansar newsupNewsup <= 5.0.10 - Missing Authorization to Authenticated (Subscriber+) Plugin Installation4.3 Medium
- Show moreLoading…