CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- nagios log serverNagios Log Server < 2024R1 XSS via Create User Function5.1 Medium
- nagios log serverNagios Log Server < 2.1.6 XSS via Create User, Edit User, & Manage Host Lists Pages5.1 Medium
- nagios log serverNagios Log Server < 2024R1.3.2 Set Email Privilege Escalation8.7 High
- nagios log serverNagios Log Server < 2024R1.3.1 RCE via Malformed Dashboard ID9.4 Critical
- nagios log serverNagios Log Server < 2024R2.0.3 Non-Empty Default Dashboard Fallback5.3 Medium
- nagios log serverNagios Log Server < 2024R2.0.3 Non-Admin Dashboard Deletion7.1 High
- nagios log serverNagios Log Server < 2024R1.0.2 LPE from Apache/Backend Shell User to Root8.5 High
- nagios log serverNagios Log Server < 2024R2.0.3 Logstash Process Root Privileges9.3 Critical
- nagios log serverNagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access8.7 High
- nagios log serverNagios Log Server < 1.4.2 Dashboards Logs Table XSS5.1 Medium
- nagios log serverNagios Log Server < 2024R2.0.2 Cluster Manager Credential Requests Sent Over Plaintext8.7 High
- nagios log serverNagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated6.9 Medium
- nagios fusionNagios Fusion < 4.0.1 XSS via Users/Servers Page5.1 Medium
- nagios fusionNagios Fusion < 4.1.5 XSS via fusionwindow Parameter5.1 Medium
- nagios fusionNagios Fusion < 4.2.0 License Information Reflected XSS6.0 Medium
- nagios fusionNagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS6.2 Medium
- nagios fusionNagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail6.2 Medium
- anheng information (hangzhou dbapp security information technology co., ltd.) mingyu operations and maintenance audit and risk control systemMingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF9.3 Critical
- seeyon zhiyuan oa web application systemSeeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass9.3 Critical
- danny-avila danny-avila/librechat, librechat +1 moreInsecure API Design in danny-avila/librechat3.1 Low
- ibm tivoli monitoringIBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations8.6 High
- ibm tivoli monitoringIBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations7.5 High
- ibm sterling connect:direct for unix, sterling connect\ +1 moreIBM Sterling Connect:Direct for UNIX command execution7.2 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to XSS in the Blogs widget4.8 Medium
- leepeuker movaryMovary unvalidated Referer header allows open redirect and phishing5.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to DNS rebinding attacks5.1 Medium
- leepeuker movaryMovary vulnerable to an open redirect5.1 Medium
- statamic cmsStatmatic vulnerable to Stored Cross-Site Scripting8.0 High
- isaacs node-tarnode-tar vulnerable to race condition leading to uninitialized memory exposure6.1 Medium
- google kerasKeras keras.utils.get_file Utility Path Traversal Vulnerability8.9 High
github.com/consensys/gnark-cryptoGognark-crypto allows unchecked memory allocation during vector deserialization7.5 High- nasa cryptolibCryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check8.8 High
- axiomthemes anubisAnubis vulnerable to possible XSS via redir parameter when using subrequest auth mode5.1 Medium
- fit2cloud jumpserverJumpServer Unauthorized LDAP Configuration Access via WebSocket7.1 High
- n8nn8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook8.8 High
- fit2cloud jumpserverJumpServer Connection Token Leak Vulnerability9.6 Critical
- hp inc. card readers b modelHP Card Readers (B Models) – Potential Information Disclosure6.8 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreCredits Page not Matching Versions in Use in the Firmware2.1 Low
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreLack of Graceful Error Handling - HTTP 5xx Error10.0 Critical
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreSystemic Internal Server Errors - HTTP 500 Response10.0 Critical
- dell policy manager for secure connect gateway, secure connect gateway scg policy manager +1 moreDell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20. 5.22, 5.24, 5.26, 5.28,...5.4 Medium
- dell secure connect gateway, secure connect gateway scg 5.0 application and appliance +1 moreDell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00...4.3 Medium
- zohocorp manageengine exchange reporter plusStored XSS6.3 Medium
- zohocorp manageengine exchange reporter plusStored XSS6.3 Medium
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- zohocorp manageengine exchange reporter plusDenial of Service (DoS)4.3 Medium
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- genetec inc. security centerA critical severity vulnerability has been identified in the ALPR Manager role of Security Center...9.8 Critical
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- Show moreLoading…