CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
java-11-openjdkTuxCare,java-11-openjdk-demoTuxCare,java-11-openjdk-develTuxCare +6 more +8 moreUpdate of java-11-openjdkNo score- eclipse foundation nextx duo, eclipse threadx netx duo +1 moreIn NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.6.3 Medium
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()2.4 Low
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()2.4 Low
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio_device_type_get()1.0 Low
- eclipse foundation usbx, eclipse threadx usbx +1 morePotential out-of-bounds read in _ux_host_class_audio_streaming_sampling_get()2.4 Low
- eclipse threadx usbx, eclipse foundation netx duo +1 moreInadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()2.1 Low
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out-of-bounds read in _nx_icmpv6_validate_options()6.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 moreOut of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages6.9 Medium
- eclipse foundation netx duo, eclipse threadx netx duo +1 morePotential out of bound read in _nx_ipv4_option_process()6.9 Medium
mammothnpm,org.zwobble.mammoth:mammothMaven +1 moreMammoth is vulnerable to Directory Traversal6.4 Medium- hgiga isherlock 4.5, isherlock 5.5 +1 moreHGiga｜iSherlock - OS Command Injection9.3 Critical
- berabuddies agentflowFlowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key9.2 Critical
- berabuddies agentflowFlowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal8.7 High
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security...9.9 Critical
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network...9.3 Critical
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network...5.3 Medium
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network...9.3 Critical
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Incorrect Authorization vulnerability has been identified in Moxa’s network security...8.7 High
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 does not...6.5 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client...8.3 High
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client...5.8 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote...6.4 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 provides the...5.0 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote...5.0 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote...9.9 Critical
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 has a Global...5.0 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 transmits...3.4 Low
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 has an "Anyone...5.8 Medium
- No product listedTillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder...6.5 Medium
- radare radare2radare2 v5.9.8 and before contains a memory leak in the function bochs_open.3.3 Low
- radare radare2radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.5.5 Medium
- radare radare2radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.5.5 Medium
- No product listedA server-side request forgery (SSRF) vulnerability in Illia Cloud illia-Builder before v4.8.5...9.6 Critical
pluxmlUbuntuA remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically...9.1 Critical- No product listedEnterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting (XSS)...5.4 Medium
- mingsoft mcmsMCMS vulnerable SQL injection via the content_title parameter9.8 Critical
- ascertia signinghubA lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass...9.8 Critical
- ascertia signinghubAn arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary...9.8 Critical
- git-lfsGit LFS may write to arbitrary files via crafted symlinks8.6 High
- xpdfStack overflow in Xpdf 4.05 due to object loop in PDF CMap2.1 Low
- envoyproxy envoyEnvoy Lua filter use-after-free when oversized rewritten response body causes crash6.5 Medium
- minioMinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS8.1 High
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo scorelinux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-genericTuxCare +7 more +9 moreUpdate of linux-metaNo score- nucleoidai nucleoidNucleoidAI Nucleoid Outbound Request cluster.ts extension.apply server-side request forgery6.9 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage5.5 Medium
- sismics teedySismics Teedy API Endpoint file access control5.3 Medium
- apeman id71Apeman ID71 ONVIF Service device_service missing authentication6.9 Medium
- connectwise automateSelf-Update Verification Mechanism Process in ConnectWise Automate8.8 High
- Show moreLoading…