CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- red hat build of keycloak 26.0, build of keycloak 26.0.16, build of keycloak 26.2 +1 more +3 moreKeycloak: keycloak tls client-initiated renegotiation denial of service7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature4.6 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System forgot-password.php sql injection6.9 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 NatStaticSetting fromNatStaticSetting buffer overflow8.7 High
- carmelogarcia courier management systemcode-projects Courier Management System edit-courier.php sql injection6.9 Medium
gccTuxCare,cppTuxCare,gcc-c++TuxCare +36 more +38 moreUpdate of gccNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo score- docker composeDocker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations8.9 High
- thm pilosPILOS Exposes PHP version5.3 Medium
- phoenix616 inventoryguiInventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement5.9 Medium
- phoenix616 inventoryguiInventoryGui affected by item duplication in GUIs which use GuiStorageElement5.0 Medium
- thm pilosPILOS Misconfigured the Access-Control-Allow-Origin Header6.3 Medium
- code-projects food ordering systemcode-projects Food Ordering System menu.php sql injection5.1 Medium
- code-projects food ordering systemcode-projects Food Ordering System deleteitem.php sql injection5.1 Medium
- d-link di-7001 mini, dlink di-7001mini-8g firmware +1 moreD-Link DI-7001 MINI msp_info.htm command injection5.3 Medium
- imagemagickImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)4.7 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection8.2 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting4.8 Medium
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System view-pass-detail.php cross site scripting4.8 Medium
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System edit-category-detail.php cross site scripting4.8 Medium
- No product listedVirtFusion Email Change _settings excessive authentication6.9 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page5.1 Medium
- code-projects nero social networking sitecode-projects Nero Social Networking Site friendprofile.php sql injection6.9 Medium
- code-projects nero social networking sitecode-projects Nero Social Networking Site deletemessage.php sql injection6.9 Medium
- code-projects nero social networking sitecode-projects Nero Social Networking Site addfriend.php sql injection6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter6.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM cross-site scripting6.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM cross-site scripting6.4 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)2.0 Low
- dell supportassist os recoveryDell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive...4.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM incorrect privilege assignment7.8 High
- code-projects nero social networking sitecode-projects Nero Social Networking Site acceptoffres.php sql injection6.9 Medium
- quequnlong shiyi-blogquequnlong shiyi-blog Job SysJobController.java deserialization5.3 Medium
- dulaiduwang003 time-sea-plusdulaiduwang003 TIME-SEA-PLUS Order Status PayController.java alipayIsSucceed improper authorization5.3 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreError Messages Wrapped In HTTP Header6.9 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreWeak Password Policy10.0 Critical
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreEmail Password Disclosure10.0 Critical
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System admin-profile.php cross site scripting4.8 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System editproduct.php cross site scripting5.3 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System editproduct.php unrestricted upload6.9 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System addcategory.php cross site scripting5.3 Medium
- apache tomcat, siemens simatic cn 4100 +1 moreApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 Medium
- apache tomcat, siemens simatic cn 4100 +1 moreApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 High
- apache tomcat, siemens simatic cn 4100 +1 moreApache Tomcat: console manipulation via escape sequences in log messages9.6 Critical
- code-projects simple food ordering systemcode-projects Simple Food Ordering System addproduct.php cross site scripting5.3 Medium
- code-projects simple food ordering systemcode-projects Simple Food Ordering System editcategory.php cross site scripting5.3 Medium
- atjiu pybbsatjiu pybbs UserApiController.java information disclosure5.3 Medium
- d-link dap-2695, dlink dap-2695 firmware +1 moreD-Link DAP-2695 Firmware Update sub_4174B0 os command injection5.1 Medium
- d-link dap-2695, dlink dap-2695 firmware +1 moreD-Link DAP-2695 Firmware Update sub_40C6B8 signature verification7.5 High
- edgelesssys constellationConstellation allows insecure use of LUKS2 persistent storage partitions8.3 High
- Show moreLoading…