CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- No product listedHatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14)...9.8 Critical
- No product listedDenial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43,...7.5 High
- No product listedReolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured UART...6.8 Medium
- rajvi-patel-22 restaurant-management-system-dbms-projectThere is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via...6.5 Medium
- iqbolshoh php education managementPHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file...6.1 Medium
- ascertia signinghubA lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8...8.1 High
- ascertia signinghubA lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows...7.5 High
- ascertia signinghubIncorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts...7.1 High
:unknown:AndroidAn issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can...9.8 Critical- arm mbed tlsMbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct...6.2 Medium
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +7 more +9 moreIn Samsung Mobile Processor and Wearable Processor Exynos 980, 1280, 1330, 1380, 1480, 2400, 1580...4.3 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +12 more +14 moreAn issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High
- samsung exynos 1080 firmware, exynos 1330 firmware, exynos 1380 firmware +10 more +12 moreAn issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +15 more +17 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980,...7.5 High
- No product listedbftpd Configuration File options.c expand_groups heap-based overflow2.0 Low
- logicaldoc community edition, logicaldoc +1 moreLogicalDOC Community Edition Add Contact frontend.jsp cross site scripting5.1 Medium
- toeverything affinetoeverything AFFiNE Avatar Upload Image Endpoint cross site scripting5.1 Medium
- givanz vvvebgivanz Vvveb Raw SQL import.php import sql injection5.1 Medium
- 70mai x200, x200 firmware +1 more70mai X200 HTTP Web Server default credentials6.9 Medium
- 70mai x200, x200 firmware +1 more70mai X200 Pairing missing authentication6.9 Medium
- e107 cms, e107 +1 moree107 CMS Avatar image.php path traversal5.3 Medium
- No product listedLibreWolf Installer setup.nsi uncontrolled search path7.3 High
- churchcrmChurchCRM Backup Restore RestoreJob.php path traversal5.1 Medium
- churchcrmChurchCRM setup.php deserialization6.3 Medium
libicalOSS-FuzzGlobal-buffer-overflow in icaltime_day_of_yearNo score- boyns rplayrplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or...5.3 Medium
- apache geodeApache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system8.8 High
unic-ucd-segmentcrates.io`unic-ucd-segment` is unmaintainedNo scoreunic-ucd-corecrates.io`unic-ucd-core` is unmaintainedNo scoreunic-ucd-agecrates.io`unic-ucd-age` is unmaintainedNo scoreunic-ucd-commoncrates.io`unic-ucd-common` is unmaintainedNo scoreunic-ucd-identcrates.io`unic-ucd-ident` is unmaintainedNo scoreunic-ucd-blockcrates.io`unic-ucd-block` is unmaintainedNo scoreunic-ucd-versioncrates.io`unic-ucd-version` is unmaintainedNo scoreunic-idna-mappingcrates.io`unic-idna-mapping` is unmaintainedNo scoreunic-bidicrates.io`unic-bidi` is unmaintainedNo scoreuniccrates.io`unic` is unmaintainedNo scoreunic-ucd-categorycrates.io`unic-ucd-category` is unmaintainedNo scoreunic-char-basicscrates.io`unic-char-basics` is unmaintainedNo scoreunic-ucd-casecrates.io`unic-ucd-case` is unmaintainedNo scoreunic-utilscrates.io`unic-utils` is unmaintainedNo scoreunic-emoji-charcrates.io`unic-emoji-char` is unmaintainedNo scoreunic-ucd-name_aliasescrates.io`unic-ucd-name_aliases` is unmaintainedNo scoreunic-idna-punycodecrates.io`unic-idna-punycode` is unmaintainedNo scoreunic-clicrates.io`unic-cli` is unmaintainedNo scoreunic-charcrates.io`unic-char` is unmaintainedNo scoreunic-idnacrates.io`unic-idna` is unmaintainedNo scoreunic-emojicrates.io`unic-emoji` is unmaintainedNo scoreunic-ucd-bidicrates.io`unic-ucd-bidi` is unmaintainedNo scoreunic-normalcrates.io`unic-normal` is unmaintainedNo score- Show moreLoading…