CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- fortinet forticlient, forticlientmac +1 moreAn Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in...5.5 Medium
- fortinet fortiadcAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...6.2 Medium
- fortinet fortianalyzerAn improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0...6.2 Medium
- fortinet fortiisolatorAn insufficient session expiration vulnerability [CWE-613] and an incorrect authorization...7.0 High
- fortinet forticlient, forticlientwindows +1 moreAn Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through...6.0 Medium
- fortinet fortios, fortiproxy +1 moreAn Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0...4.8 Medium
- fortinet fortiosAn Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2...4.3 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS...5.0 Medium
- fortinet fortianalyzerA concurrent execution using shared resource with improper synchronization ('Race Condition')...5.3 Medium
- fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 moreA insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through...4.2 Medium
- fortinet fortios, fortiproxy +1 moreA stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7...6.3 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0...6.5 Medium
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] in FortiOS...4.5 Medium
- fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy...6.8 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4...5.7 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version...6.7 Medium
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7...2.5 Low
- fortinet forticlient, forticlientmac +1 moreAn Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in...7.0 High
- fortinet fortipam, fortiswitchmanager +1 moreA weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0...7.4 High
- fortinet fortiosAn Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0...7.8 High
- fortinet fortisiemAn improper neutralization of input during web page generation vulnerability [CWE-79] in...6.1 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3...2.5 Low
- fortinet fortisoar, fortisoar on-premise +1 moreAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...6.6 Medium
chronySUSESecurity update for chronyNo score- home-assistant coreHome Assistant vulnerable to Stored XSS in Energy dashboard from Energy Entity Name8.5 High
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the ACL Resource Access configuration page6.8 Medium
- argoproj argo workflows, argo-workflows +1 moreArgo Workflows exposes artifact repository credentials in workflow-controller logs8.5 High
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the SNMP traps group configuration page6.8 Medium
- centreon web, infra monitoring +1 moreA user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page6.8 Medium
- argoproj argo-workflows, argo workflows +1 moreargo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite8.1 High
- amd epyc™ 7003 series processors (formerly codenamed "milan"), epyc™ 9005 series processors (formerly codenamed "turin") +1 moreImproper access control within AMD SEV-SNP could allow an admin privileged attacker to write to...6.0 Medium
- espocrmEspoCRM allows arbitrary user creation via stored SVG injection and CSRF5.4 Medium
- apache geodeApache Geode: Reflected XSS6.1 Medium
- centreon infra monitoring, web +1 moreRCE via the poller reload feature available only to user with high privilege7.2 High
- ivanti endpoint manager mobilePath traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4...4.7 Medium
- centreon web, infra monitoring +1 moreXSS found in the HTTP loader widget6.8 Medium
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...7.2 High
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...7.2 High
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...7.2 High
- ibm content navigatorIBM Content Navigator information disclosure5.3 Medium
- ami aptiov, aptio v +1 moreexFat Memory Corruption Issue5.8 Medium
- ami aptiov, aptio v +1 moreFixupArray Pointer Validation in NTFS4.6 Medium
- ami aptiov, aptio v +1 moreBuffer Overflow in NTFS when parsing the ATTRIBUTE_LIST5.8 Medium
- ami aptiov, aptio v +1 moreBuffer Overflow in NTFS when parsing the VOLUME_NAME5.8 Medium
- fortinet fortivoiceTwo improper neutralization of special elements used in an OS command ('OS Command Injection')...7.2 High
- rockwell automation 1715-aentr ethernet/ip adapterRockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability7.7 High
- rockwell automation 1715-aentr ethernet/ip adapterRockwell Automation 1715 EtherNet/IP Comms Module Denial-Of-Service Vulnerability7.7 High
- rockwell automation comms - 1783-natr, rockwellautomation 1783-natr firmware +1 moreRockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability7.0 High
- sfs consulting information processing industry and foreign trade inc. winsureSQLi in SFS Winsure9.8 Critical
- b&r industrial automation gmbh automation runtimeCSV Formula Injection Vulnerability5.3 Medium
- Show moreLoading…