CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and Prior, contain(s) an Improper Neutralization of Special Elements...7.2 High
chronySUSESecurity update for chronyNo score- eveo urve smart officeStored Cross-Site Scripting in URVE Smart Office5.1 Medium
- opensolution quick.cartMultiple Cross-Site Request Forgery in Quick.Cart5.1 Medium
- checkmkCross Site Scripting through compromised remote site8.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morevfs: Don't leak disconnected dentries on umount7.8 High
- linuxixgbevf: fix mailbox API compatibility by negotiating supported features7.8 High
- linuxsmb: client: Fix refcount leak for cifs_sb_tlink2.0 Low
- linuxKVM: arm64: Prevent access to vCPU events before init6.7 Medium
- linuxbtrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST5.3 Medium
- linuxbtrfs: do not assert we found block group item when creating free space treeNo score
- linuxcifs: parse_dfs_referrals: prevent oob on malformed input9.4 Critical
- linuxALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()No score
- linuxALSA: hda: Fix missing pointer check in hda_component_manager_init functionNo score
- linuxdrm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies7.8 High
- linuxusb: gadget: f_rndis: Refactor bind path to use __free()7.8 High
- linuxusb: gadget: f_acm: Refactor bind path to use __free()7.8 High
- linuxusb: gadget: f_ecm: Refactor bind path to use __free()7.8 High
- linuxusb: gadget: f_ncm: Refactor bind path to use __free()7.8 High
- linuxixgbe: fix too early devlink_free() in ixgbe_remove()No score
- linux, linux kernel +1 moreksmbd: fix recursive locking in RPC handle list access7.5 High
- linuxcxl/features: Add check for no entries in cxl_feature_infoNo score
- linuxhfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()7.1 High
- linuxNFSD: Define a proc_layoutcommit for the FlexFiles layout type7.5 High
- linuxdrm/xe: Don't allow evicting of BOs in same VM in array of VM binds5.7 Medium
- apache airflowApache Airflow: Command injection in "example_dag_decorator"4.6 Medium
- apache airflowApache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API5.4 Medium
- apache airflowApache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)4.6 Medium
- progress software flowmonPrivilege escalation via writable configuration files in Progress Flowmon6.7 Medium
- scottopolis apppresser – mobile app frameworkAppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure5.3 Medium
- unknown ns maintenance mode for wpNS Maintenance Mode for WP <= 1.3.1 - Admin+ Stored XSS3.5 Low
- sminozzi site checkup debug ai troubleshooting with wizard and tips for each issueSite Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning6.5 Medium
- remyb92 translate wordpress with weglot – multilingual ai translationTranslate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion5.3 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- No product listedA stored cross-site scripting (XSS) vulnerability in AIxBlock commit 04f305 allows attackers to...6.1 Medium
- cszcms csz cmsA SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality....5.4 Medium
- No product listedEach Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store...7.5 High
- No product listedIncorrect access control in the Web management interface in Each Italy Wireless Mini Router...7.5 High
- mayurik pet grooming management softwareA path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1...8.2 High
- tenda ac8 firmwareA buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to...7.5 High
- No product listedAn issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code...8.8 High
github.com/sqls-server/sqlsGo,govulncheck-vulndbopenSUSE +1 moresqls-server/sqls is vulnerable to command injection in the config command7.5 High- No product listedMobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by...7.5 High
- No product listedAG Life Logger Android App version v1.0.2.72 and before (package name com.donki.healthy),...7.5 High
- No product listedKanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C.,...7.5 High
- No product listedmCarFix Motorists App version 2.3 (package name com.skytop.mcarfix), developed by Paniel Mwaura,...7.5 High
- No product listedSenza: Keto & Fasting Android App version 2.10.15 (package name com.gl.senza), developed by Paul...7.5 High
- No product listedAdForest - Classified Android App version 4.0.12 (package name scriptsbundle.adforest), developed...7.5 High
- No product listedABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta...7.5 High
- Show moreLoading…