CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- ermig1979 antiduplermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link following8.5 High
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store admin_football.php sql injection6.9 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store admin_product.ph sql injection6.9 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store admin_feature.php sql injection6.9 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store admin_index.php sql injection6.9 Medium
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()7.3 High
- x.org x server, xwayland, debian linux +25 more +27 moreXorg: xwayland: use-after-free in xkb client resource removal7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +15 more +17 moreXorg: xmayland: use-after-free in xpresentnotify structure creation7.3 High
- No product listedAn issue was discovered in Dataphone A920 v2025.07.161103. A custom packet based on public...9.1 Critical
- No product listedHotta Studio GameDriverX64.sys 7.23.4.7, a signed kernel-mode anti-cheat driver, allows local...5.5 Medium
- No product listedStack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware...9.1 Critical
- frroutingFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via...7.5 High
- frroutingFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via...7.5 High
- frroutingFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via...7.5 High
- frroutingFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via...7.5 High
- No product listedA reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank...5.4 Medium
- No product listedAn out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in...9.1 Critical
- No product listedReolink Video Doorbell Wi-Fi DB_566128M5MP_W stores and transmits DDNS credentials in plaintext...7.5 High
- No product listedAn issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized...7.5 High
- jishenghua jsherpIncorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a...7.5 High
- zhyd oneblogzhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via...9.8 Critical
- No product listedUnauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot.7.5 High
- No product listedAn issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via...7.5 High
- No product listedalexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve...8.8 High
- bitcoin coreBitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2).7.5 High
- bitcoin coreBitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).7.5 High
- ibm db2 high performance unload, db2 high performance unload load +1 moreFixes to common vulnerabilities found in IBM Db2 High Performance Unload6.5 Medium
- ibm db2 high performance unload, db2 high performance unload load +1 moreFixes to common vulnerabilities found in IBM Db2 High Performance Unload6.5 Medium
- ibm db2 high performance unload, db2 high performance unload load +1 moreFixes to common vulnerabilities found in IBM Db2 High Performance Unload6.5 Medium
- ibm db2 high performance unload, db2 high performance unload load +1 moreFixes to common vulnerabilities found in IBM Db2 High Performance Unload6.5 Medium
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website supplier_update.php cross site scripting5.3 Medium
- remyandrade student grades management systemSourceCodester Student Grades Management System admin.php delete_user cross site scripting4.8 Medium
- hp thinpro, hp inc thinpro 8.1 +1 moreHP ThinPro 8.1 SP8 Security Updates5.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to CSRF in Headless APIs7.0 High
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website product_add.php cross site scripting5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websitecode-projects E-Commerce Website supplier_add.php cross site scripting5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Does Not Limit Access to APIs Before Email Verification6.9 Medium
- matthewdeaves willow cms, statamic cms +1 moreWillow CMS add unrestricted upload5.1 Medium
- matthewdeaves willow cms, statamic cms +1 moreWillow CMS Add Post add cross site scripting4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to DoS via Crafted Headless API Request7.1 High
- shawon100 ruet ojshawon100 RUET OJ details.php sql injection5.3 Medium
- shawon100 ruet ojshawon100 RUET OJ contestproblem.php sql injection5.3 Medium
- elabftweLabFTW HTML / CSS Injection via Malicious SVG Upload Leads to Credential Theft / Clickjacking6.8 Medium
- thm pilosPILOS is missing session regeneration after password change5.0 Medium
- frappe learning, lms +1 moreFrappe Learning users were able to add HTML through input fields in the Job Form1.2 Low
- frappe learning, lms +1 moreFrappe Learning allowed students to access the Quiz Form via direct URL1.3 Low
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Stores Password Reset Tokens in Plain Text6.9 Medium
- shawon100 ruet ojshawon100 RUET OJ description.php sql injection5.3 Medium
- shawon100 ruet ojshawon100 RUET OJ POST Request process.php sql injection6.9 Medium
- phoenix616 inventoryguiInventoryGui allows item duplication in GUIs which use GuiStorageElement5.3 Medium
- Show moreLoading…