CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal6.3 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal6.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal ComboServlet denial of service via large file combination6.9 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.3 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.3 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.2 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-13279.3 Critical
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource6.9 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password7.3 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Relative Path Traversal8.6 High
- microsoft azure compute resource providerAzure Compute Resource Provider Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure event grid system, azure event grid +1 moreAzure Event Grid System Elevation of Privilege Vulnerability7.3 High
- microsoft azure notification serviceAzure Notification Service Elevation of Privilege Vulnerability7.7 High
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories8.8 High
- red hat openshift virtualization 4, rhel-8-cnv-4.12, rhel-9-cnv-4.14 +4 more +6 moreContainer-native-virtualization: privilege escalation via excessive /etc/passwd permissions6.4 Medium
- rollbar rollbar.jsRollbar.js Prototype Pollution Vulnerability in merge()5.9 Medium
- veeder-root tls4b automatic tank gauge systemCommand Injection in Veeder-Root TLS4B Automatic Tank Gauge System9.4 Critical
- veeder-root tls4b automatic tank gauge systemInteger Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System7.1 High
- flyfrontier frontier airlines, frontier airlines flyfrontier.com +1 moreFrontier Airlines publicly available email address validation6.9 Medium
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Denial of Service Due to Rate Limit Regression7.5 High
- hashicorp vault, vault enterprise +1 moreVault AWS auth method bypass due to AWS client cache8.1 High
- arista networks edge threat management - arista next generation firewallDiagnostics command injection vulnerability7.2 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page2.0 Low
- arista networks edge threat management - arista next generation firewallCaptive Portal can allow authentication bypass8.8 High
- arista networks edge threat management - arista next generation firewallCaptive Portal can expose sensitive information7.5 High
- nvidia virtual gpu managerNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an...4.4 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker...5.0 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to...5.5 Medium
- oxford nano technologies minknowOxford Nanopore Technologies MinKNOW Improper Check for Unusual or Exceptional Conditions6.8 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could...5.5 Medium
- oxford nano technologies minknowOxford Nanopore Technologies MinKNOW Insufficiently Protected Credentials7.3 High
- tibbo systems aggregate network managerTibbo AggreGate Network Manager < 6.40.05 System Information Exposure6.9 Medium
- tibbo systems aggregate network managerTibbo AggreGate Network Manager < 6.40.05 Login Functionality User Enumeration6.9 Medium
- wildrikku octoprint-spoolmanagerOctoPrint-SpoolManager Plugin APIs do not enforce authentication8.1 High
- kottsterKottster app reinitialization can be re-triggered allowing command injection in development mode7.2 High
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreSerial Console Enabled5.2 Medium
- openbao aws plugin, openbao-plugins +1 moreOpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method8.1 High
kernel-livepatch-MICRO-6-0-RT_Update_13SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_13No scorekernel-livepatch-MICRO-6-0-RT_Update_13SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_13No score- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreKeycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed5.4 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 moreKeycloak-server: too long and not settings compliant session5.4 Medium
- moxa tn-4500a series, tn-5500a series, tn-g4500 series +1 more +3 moreAn acceptance of extraneous untrusted data with trusted data vulnerability has been identified in...0.0 None
- moxa tn-4500a series, tn-5500a series, tn-g4500 series +1 more +3 moreCross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an...4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and DXP do not properly restrict access to OpenAPI6.9 Medium
- vilar vs-ipc1002, vimicro vs-ipc1002 firmware +1 moreXSS vulnerability in Vilar VS-IPC1002 IP cameras4.8 Medium
- vilar vs-ipc1002, vimicro vs-ipc1002 firmware +1 moreDoS vulnerability in Vilar VS-IPC1002 IP cameras7.1 High
- fastlinemedia beaver builder, the beaver builder team beaver builder plugin (starter version) +1 moreBeaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'6.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregatorFeedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery5.0 Medium
- Show moreLoading…