CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- ibm concert, concert software +1 moreMultiple Vulnerabilities in IBM Concert Software.5.3 Medium
- ipfireIPFire < v2.29 Command Injection via Proxy Report Creation8.7 High
- ipfireIPFire < v2.29 Command Injection via URL Filter Blacklist8.7 High
- ipfireIPFire < v2.29 SQL Injection via OpenVPN Connection Logs7.1 High
- ipfireIPFire < v2.29 Stored XSS via Default Country Search5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Default IP Search Value5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Default Time Sync5.1 Medium
- ipfire project ipfireIPFire < v2.29 Stored XSS via DNS Creation (proxy.cgi)5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via DNS Creation (dns.cgi)5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Dynamic DNS Host5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Location Group Creation5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Mail Server Settings5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Quality of Service (QoS) Settings5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Remote Syslog Server Address5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Service Creation5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via User Quota Rule URL Filter5.1 Medium
- ipfireIPFire < v2.29 Stored XSS via Whitelisted Host Creation5.1 Medium
- mozilla firefoxUse-after-free in WebGPU internals triggered from a compromised child process9.8 Critical
- gcc productions inc. fade inAn out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions...7.8 High
- gcc productions inc. fade inA use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc....7.8 High
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.0 +2 moreOpenshift-ai: trusty ai grants all authenticated users to list pods in any namespace5.0 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreOrg.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id6.0 Medium
- hitachi energy tropos 4th genThe “Diagnostics Tools” page of the web-based configuration utility does not properly validate...7.5 High
- hitachi energy tropos 4th genBy making minor configuration changes to the TropOS 4th Gen device, an authenticated user with...7.5 High
- hitachi energy tropos 4th genCommand injection vulnerability exists in the “Logging” page of the web-based configuration...8.7 High
- asseco poland s.a. mmedicaUnauthorized database access in Asseco mMedica9.3 Critical
- linux, linux kernel +1 morehfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()7.1 High
- linuxperf: arm_spe: Prevent overflow in PERF_IDX2OFF()7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenbd: restrict sockets to TCP and UDP7.0 High
- linuxriscv, bpf: Sign extend struct ops return values properly7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morebpf: Explicitly check accesses to bpf_sock_addr9.1 Critical
- linuxf2fs: fix to avoid overflow while left shift operation5.8 Medium
- linuxPCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq()6.8 Medium
- linuxtcp_metrics: use dst_dev_net_rcu()8.1 High
- linuxipv4: start using dst_dev_rcu()9.8 Critical
- linuxdrm/msm: Do not validate SSPP when it is not ready5.7 Medium
- linuxfanotify: Validate the return value of mnt_ns_from_dentry() before dereferencingNo score
- linuxtty: n_gsm: Don't block input queue by waiting MSC6.8 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morepps: fix warning in pps_register_cdev when register device fail2.0 Low
- linuxdrm/msm: Fix obj leak in VM_BIND error path7.8 High
- linuxfs: ntfs3: Fix integer overflow in run_unpack()8.4 High
- linuxfs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist7.8 High
- linuxwifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links()No score
- linuxRISC-V: KVM: Write hgatp register with valid mode bitsNo score
- linuxsmc: Fix use-after-free in __pnet_find_base_ndev().7.8 High
- linuxcrypto: comp - Use same definition of context alloc and free ops7.0 High
- linuxcrypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs9.1 Critical
- linuxRDMA/rxe: Fix race in do_task() when draining7.8 High
- Show moreLoading…