CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- piextract soop-clmPiExtract｜SOOP-CLM - Server-Side Request Forgery6.9 Medium
- 3ds 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x8.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x8.7 High
- dassault systèmes enovia specification manager, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x8.7 High
- 3ds 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x8.7 High
- piextract soop-clmPiExtract ｜SOOP-CLM - Hidden Functionality8.6 High
- dassault systèmes station launcher app in 3dexperience platformOS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x9.0 Critical
- ebm technologies uniweb/solipacs webserverEBM Technologies｜Uniweb/SoliPACS WebServer - Missing Authentication6.9 Medium
- code-projects automated voting systemcode-projects Automated Voting System add_candidate_modal.php. sql injection5.3 Medium
- ebm technologies uniweb/solipacs webserverEBM Technologies｜Uniweb/SoliPACS WebServer - Missing Authentication6.9 Medium
- tenda rp3 proTenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password8.4 High
- kiloview n30Hardcoded TLS private key in Kiloview N30 firmware8.7 High
- kiloview ndiAPI Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products10.0 Critical
- d-link dap-2695, dlink dap-2695 firmware +1 moreD-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection5.1 Medium
- ericsson ran compute (all bb versions), site controller 6610 +1 moreArbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller8.4 High
- ericsson network manager, network manager(enm) +1 moreEricsson Network Manager: escalation of privilege vulnerability6.9 Medium
- ericsson network manager, network manager(enm) +1 moreEricsson Network Manager: improper neutralization of user controlled input2.4 Low
- campcodes online beauty parlor management systemCampcodes Online Beauty Parlor Management System search-appointment.php sql injection5.1 Medium
- unknown the plus addons for elementorThe Plus Addons for Elementor < 6.3.16 - Author+ Stored XSS6.8 Medium
- campcodes online beauty parlor management systemCampcodes Online Beauty Parlor Management System manage-services.php sql injection5.1 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System booking.php sql injection6.9 Medium
- hcl software maxai workbenchHCL Unica MaxAI Workbench is vulnerable to improper input validation3.5 Low
- oranbyte school management systemProjectsAndPrograms School Management System missing authentication6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload6.9 Medium
- hcl software unica campaignHCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS)4.3 Medium
- hcl software unica platform, hcltech unica +1 moreUnprotected files are impacting HCL Unica Platform5.3 Medium
- oranbyte school management systemProjectsAndPrograms School Management System uploadNotes.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System createNotice.php unrestricted upload6.9 Medium
- oranbyte school management systemProjectsAndPrograms School Management System editNotes.php unrestricted upload6.9 Medium
- nextcloud flowTotal.js Flow SVG File unrestricted upload5.1 Medium
- yousaf530 inferno online clothing storeyousaf530 Inferno Online Clothing Store log.php sql injection6.9 Medium
- ibm security verify access, verify identity access container, verify identity access +2 moreIBM Security Verify Access hard coded credentials8.1 High
- utt hiper 2620g, 2620g firmware +1 moreUTT HiPER 2620G fNTP strcpy buffer overflow8.7 High
- utt 进取 518g, 518g firmware +1 moreUTT 进取 518G formTaskEdit_ap buffer overflow8.7 High
- utt 进取 518g, 518g firmware +1 moreUTT 进取 518G formRemoteControl sub_4247AC buffer overflow8.7 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Password shadow weak hash1.0 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Root Account hard-coded password7.3 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery6.3 Medium
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini GATT Service information disclosure2.3 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini GATT Service access control5.3 Medium
- tomofun furbo mobile appTomofun Furbo Mobile App Authentication Token sensitive information2.4 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini UART sensitive information1.0 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials6.3 Medium
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Registration denial of service4.1 Medium
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Trial Restriction access control1.0 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission2.3 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information4.8 Medium
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Bluetooth denial of service5.3 Medium
- tomofun furbo 360, furbo 360 dog camera firmware +1 moreTomofun Furbo 360 Audio race condition5.3 Medium
- Show moreLoading…