CVEs published October 5, 2025
39 CVEs were published on October 5, 2025: 1 critical, 10 high. 1 is now in CISA KEV.
- Published
- 39
- Critical
- 1
- High
- 10
- Medium
- 27
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- Belkin F9K1015
- 12
- Frappe LMS
- 4
- Open Asset Import Library Assimp · pyassimp
- 3
- CRMEB
- 2
- samanhappy MCPHub · @samanhappy/mcphub
- 2
- Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护…
- 2
- allegroai/clearml · clearml
- 1
- AllStarLink Supermon
- 1
- Axosoft Scrum and Bug Tracking
- 1
- CodeCanyon Mentor LMS · ui-lib Mentor LMS
- 1
Critical 1
High 10
- CVE-2025-11305UTT HiPER 840G formTaskEdit strcpy buffer overflowUTT HiPER
- CVE-2025-11302Belkin F9K1015 formWpsStart buffer overflowBelkin F9K1015
- CVE-2025-11301Belkin F9K1015 formWlanSetupWPS buffer overflowBelkin F9K1015
- CVE-2025-11300Belkin F9K1015 formWlanMP buffer overflowBelkin F9K1015
- CVE-2025-11299Belkin F9K1015 formWanTcpipSetup buffer overflowBelkin F9K1015
- CVE-2025-11297Belkin F9K1015 formSetLanguage buffer overflowBelkin F9K1015
- CVE-2025-11296Belkin F9K1015 formPPTPSetup buffer overflowBelkin F9K1015
- CVE-2025-11295Belkin F9K1015 formPPPoESetup buffer overflowBelkin F9K1015
- CVE-2025-11294Belkin F9K1015 formL2TPSetup buffer overflowBelkin F9K1015
- CVE-2025-11293Belkin F9K1015 formConnectionSetting buffer overflowBelkin F9K1015
Medium, low and unrated 28
- CVE-2025-11310Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findFileServerPage.do findFileServerPage sql injectionTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护…
- CVE-2025-11309Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findDeptPage.do doFilter sql injectionTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护…
- CVE-2025-11308Vanderlande Baggage 360 messages cross site scriptingVanderlande Baggage
- CVE-2025-11306qianfox FoxCMS Search cross site scriptingqianfox FoxCMS
- CVE-2025-11304CodeCanyon/ui-lib Mentor LMS API cross-domain policyCodeCanyon Mentor LMS · ui-lib Mentor LMS
- CVE-2025-11303Belkin F9K1015 mp command injectionBelkin F9K1015
- CVE-2025-11298Belkin F9K1015 formSetWanStatic command injectionBelkin F9K1015
- CVE-2025-11292Belkin F9K1015 formBSSetSitesurvey command injectionBelkin F9K1015
- CVE-2025-11291ixmaps website2017 HTTP GET Request map.php cross site scriptingixmaps website2017
- CVE-2025-11290CRMEB JWT HMAC Secret hard-coded keyCRMEB
- CVE-2025-11289westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scriptingwestboy CicadasCMS
- CVE-2025-8917Path Traversal Leading to Remote Code Execution in allegroai/clearmlallegroai/clearml · clearml
- CVE-2025-8406Path Traversal in zenml-io/zenmlzenml-io/zenml · zenml
- CVE-2025-11288CRMEB GET Parameter product sql injectionCRMEB
- CVE-2025-11287samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authenticationsamanhappy MCPHub · @samanhappy/mcphub
- CVE-2025-11286samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgerysamanhappy MCPHub
- CVE-2025-11285samanhappy MCPHub serverController.ts os command injectionsamanhappy MCPHub · @samanhappy/mcphub
- CVE-2025-11284Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded passwordZytec Dalian Zhuoyun Technology Central Authentication Serv…
- CVE-2025-11283Frappe LMS Course cross site scriptingFrappe LMS
- CVE-2025-11282Frappe LMS Incomplete Fix CVE-2025-55006 cross site scriptingFrappe LMS
- CVE-2025-11281Frappe LMS Unpublished Course courses access controlFrappe LMS
- CVE-2025-11280Frappe LMS Assignment Picture files direct requestFrappe LMS
- CVE-2025-11279Axosoft Scrum and Bug Tracking Add Work Item csv injectionAxosoft Scrum and Bug Tracking
- CVE-2025-11278AllStarLink Supermon AllMon2 cross site scriptingAllStarLink Supermon
- CVE-2025-11277Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflowOpen Asset Import Library Assimp · pyassimp
- CVE-2025-11276Rebuild Comment/Guestbook cross site scriptingRebuild
- CVE-2025-11275Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflowOpen Asset Import Library Assimp · pyassimp
- CVE-2025-11274Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resourcesOpen Asset Import Library Assimp · pyassimp