CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- mediawikiEventStreams publishes suppressed recent change entries that are suppressed from their creation2.7 Low
- mediawikiAPI list=allpages with maxsize is making really slow queries1.7 Low
- mediawikiStored XSS through system messages in Special:RecentChangesLinked (MW Core)0.0 None
- mediawikiSuppressed blocked IP is visible in Special:BlockList, RC, and other places1.7 Low
- mediawiki, wikimedia parsoid +1 moreSanitizer::validateAttributes data-XSS0.0 None
- wikimedia foundation confirmeditAdd rate limiting to ApiFancyCaptchaReload0.0 None
- No product listedA reflected cross-site scripting (XSS) vulnerability in BEO GmbH BEO Atlas Einfuhr Ausfuhr 3.0...6.1 Medium
- No product listedDLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by...7.8 High
- vtkKitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in...9.8 Critical
- vtkKitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability...7.1 High
- vtkKitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in...7.5 High
- No product listedIncorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1...10.0 Critical
- mediawikiStored i18n XSS exposed by security patch for T4020770.0 None
- wikimedia foundation oathauthReauth for enabling 2FA can be bypassed by submitting a form0.0 None
- danny-avila danny-avila/librechat, librechat +1 moreDenial of Service in danny-avila/librechat5.4 Medium
- veeam backup and replication, backup \& replication +1 moreA vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code...10.0 Critical
- veeam agent for microsoft windows, agent for windows +1 moreThis vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if...7.3 High
- revive adserver, revive-adserver revive adserver +1 moreA reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver...6.3 Medium
- veeam backup and replication, backup \& replication +1 moreA vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated...8.8 High
- ubiquiti inc unifi access application, ui unifi access +1 moreA malicious actor with access to the management network could exploit a misconfiguration in UniFi...10.0 Critical
- ubiquiti inc unifi talk g3 phones, unifi talk touch, unifi talk touch max +2 moreA vulnerability was identified in certain UniFi Talk devices where internal debugging...7.3 High
- brave desktop browserIn Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the ...6.5 Medium
- revive adserver, revive-adserver revive adserver +1 moreSQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when...8.8 High
- nagios xiNagios XI < 2011R1.9 XSS via xiwindow Variables Affecting Permalinks5.1 Medium
- nagios xiNagios XI < 5.8.0 XSS via Views URL Handling5.1 Medium
- nagios xiNagios XI < 5.4.13 XSS via Views Page5.1 Medium
- nagios xiNagios XI < 2012R2.6 XSS via Tools Menu5.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via Status/Report Page Link Functions5.1 Medium
- nagios xiNagios XI < 5.2.4 XSS via Report startdate/enddate Fields5.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via Recurring Downtime Script5.1 Medium
- nagios xiNagios XI < 5.8.0 XSS via My Tools Page5.1 Medium
- nagios xiNagios XI < 5.2.4 XSS via “My Reports” Listing5.1 Medium
- nagios xiNagios XI < 5.2.4 XSS via Menu System5.1 Medium
- nagios xiNagios XI < 5.7.3 XSS via Manage Users in Admin Interface5.1 Medium
- nagios xiNagios XI < 2024R1 XSS via Graph Explorer5.1 Medium
- nagios xiNagios XI < 5.11.3 XSS via Graph Explorer5.1 Medium
- nagios xiNagios XI < 2024R1.1.3 XSS via Executive Summary Report5.1 Medium
- nagios xiNagios XI < 5.7.2 XSS via Dashboard Background Color Setting5.1 Medium
- nagios xiNagios XI < 2024R1.0.2 XSS via Core Command Expansion5.1 Medium
- nagios xiNagios XI < 2024R1.1.3 XSS via Capacity Planning Report5.1 Medium
- nagios xiNagios XI < 5.11.3 XSS via Bulk Modifications5.1 Medium
- nagios xiNagios XI < 5.7.2 XSS via BPI Config Management5.1 Medium
- nagios xiNagios XI < 5.8.0 XSS via BPI Config ID Handling5.1 Medium
- nagios xiNagios XI < 5.11.3 XSS via Bandwidth Report5.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via backend_url JavaScript Link Handler5.1 Medium
- nagios xiNagios XI < 2011R1.9 XSS via Alert Heatmap Report & “My Reports” Listing5.1 Medium
- nagios xiNagios XI < 5.8.7 XSS in Audit Log via Send to NLS Form5.1 Medium
- nagios xiNagios XI < 5.11.3 XSS & CSRF via Hypermap Replay5.1 Medium
- nagios xiNagios XI < 2024R1 Web SSH Terminal Missing Access Control9.4 Critical
- nagios xiNagios XI < 5.7.2 Unrestricted File Upload via Audio Import Directory8.7 High
- Show moreLoading…