CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- No product listed2nd Line Android App version v1.2.92 and before (package name com.mysecondline.app), developed by...7.5 High
- No product listedTalkTalk 3.3.6 Android App contains improper access control vulnerabilities in multiple API...7.5 High
- No product listedAn arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975...6.1 Medium
- perfree perfreeblogPerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization...6.5 Medium
vtk9DebianKitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter...6.5 Medium- No product listedA Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the /publix/run endpoint...6.1 Medium
- zucchetti ad hoc infinityCross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows...6.1 Medium
- No product listedCross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Revolution 4.1 and earlier allows...6.1 Medium
- No product listediib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization.9.8 Critical
pdf2zhPyPIByaidu PDFMathTranslate vulnerable to open redirect6.1 Medium- hiruna glamour salon management systemCross-site scripting (XSS) vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon...6.1 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeIncorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a...4.2 Medium
- google chromeIncorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote...4.2 Medium
- google chromePolicy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who...6.5 Medium
- google chromeIncorrect security UI in Fullscreen UI in Google Chrome prior to 142.0.7444.59 allowed a remote...4.2 Medium
- google chromeOut of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...4.3 Medium
- google chromeOut of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...4.3 Medium
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote...5.3 Medium
- google chromeInappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0...5.5 Medium
- google chromeUse after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a...8.8 High
- google chromeUse after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who...7.5 High
- google chromePolicy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who...5.9 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a...5.4 Medium
- google chromeRace in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who...4.2 Medium
- google chromeInappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote...4.3 Medium
- google chromeRace in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially...8.8 High
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an...6.5 Medium
- google chromeObject lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker...7.5 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform...8.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal vulnerable to password enumeration6.3 Medium
- arista networks danz monitoring fabricCryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO5.9 Medium
- arista networks danz monitoring fabricOn affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)4.3 Medium
- arista networks danz monitoring fabricOn affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a confi…5.3 Medium
- arista networks danz monitoring fabricOn affected platforms, restricted users could use SSH port forwarding to access host-internal services7.5 High
- arista networks danz monitoring fabricOn affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.7.8 High
usd-corePyPIOpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability6.9 Medium- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials6.3 Medium
- vertikal systems hospital manager backend servicesVertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information6.9 Medium
- vertikal systems hospital manager backend servicesVertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere8.7 High
- gimp, debian linux +1 moreGIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- allegraAllegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability4.9 Medium
- Show moreLoading…