CVEs published October 9, 2025
169 CVEs were published on October 9, 2025: 20 critical, 61 high. 1 is now in CISA KEV.
- Published
- 169
- Critical
- 20
- High
- 61
- Medium
- 83
- Low
- 1
- Unrated
- 4
- Now in CISA KEV
- 1
- Fix available
- 94
Most affected products
- Juniper Networks Junos Space
- 26
- Qualcomm Snapdragon
- 19
- Newforma Project Center
- 13
- Linux
- 10
- Juniper Networks Junos OS
- 7
- Tenda AC7
- 6
- code-projects Online Complaint Site
- 5
- BLSOPS bbot · bbot
- 4
- Juniper Networks Junos OS Evolved
- 4
- bigbluebutton
- 3
Critical 20
- CVE-2025-61928Better Auth: Unauthenticated API key creation through api-key pluginbetter-auth
- CVE-2025-59286Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot's Business Chat
- CVE-2025-59272Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot's Business Chat
- CVE-2025-59252M365 Copilot Information Disclosure VulnerabilityMicrosoft 365 Word Copilot
- CVE-2025-55321Azure Monitor Log Analytics Spoofing VulnerabilityMicrosoft Azure Monitor
- CVE-2025-59246Azure Entra ID Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2025-59218Azure Entra ID Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2025-35051Newforma Project Center Server (NPCS) .NET unauthenticated deserializationNewforma Project Center
- CVE-2025-35050Newforma Info Exchange (NIX) .NET unauthenticated deserializationNewforma Project Center
- CVE-2017-20203NetSarang v5.0 Malicious Backdoor Supply Chain CompromiseNetSarang Computer Xmanager Enterprise · NetSarang Compu… +3
- CVE-2025-59978Junos Space: Stored cross-site scripting vulnerability in web applicationJuniper Networks Junos Space
- CVE-2025-10284Improper Archive Extraction in unarchive Enables RCEBLSOPS bbot · bbot
- CVE-2025-10283Improper .git Sanitization in gitdumper Enables RCEBLSOPS bbot · bbot
- CVE-2025-11522Search & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account TakeoverElated-Themes Search & Go - Directory WordPress Theme
- CVE-2025-11539Arbitrary Code Execution in Grafana Image Renderer Plugingrafana-image-renderer
- CVE-2025-7634WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusionwptravelengine WP Travel Engine – Tour Booking Plugin – Tou…
- CVE-2025-7526WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renamingwptravelengine WP Travel Engine – Tour Booking Plugin – Tou…
- CVE-2025-10586Community Events <= 1.5.1 - Unauthenticated SQL Injectionjackdewey Community Events
- CVE-2025-56683A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary co
- CVE-2025-60316SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.
High 61
- CVE-2016-15047AVTECH CloudSetup.cgi Authenticated Command InjectionAVTECH SECURITY IP Camera, NVR, and DVR Devices
- CVE-2025-59271Redis Enterprise Elevation of Privilege VulnerabilityMicrosoft Azure Cache for Redis Enterprise · Microsoft Azur…
- CVE-2025-59247Azure PlayFab Elevation of Privilege VulnerabilityMicrosoft Azure PlayFab
- CVE-2025-61779Trustee's attestation-policy endpoint is not protected by admin autenticationconfidential-containers trustee
- CVE-2025-61773pyLoad CNL and captcha handlers allow code Injection via unsanitized parameterspyload · pyload-ng
- CVE-2025-34248D-Link Nuclias Connect < v1.3.1.4 Directory Traversal to Arbitrary File DeletionD-Link Nuclias Connect
- CVE-2025-61602BigBlueButton vulnerable to Chat DoS via invalid reactionEmojiIdbigbluebutton
- CVE-2025-61601BigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutationbigbluebutton
- CVE-2025-35061Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmxNewforma Project Center
- CVE-2025-35058Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashxNewforma Project Center
- CVE-2025-35055Newforma Info Exchange (NIX) insecure file uploadNewforma Project Center
- CVE-2025-59146New API has Authenticated Server-Side Request Forgery (SSRF) issueQuantumNous new-api
- CVE-2025-55200BigBlueButton vulnerable to Stored XSS via name of user at Shared Notesbigbluebutton
- CVE-2025-11550Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereferenceTenda W12
- CVE-2025-11573Denial of Service issue in Amazon.IonDotnetAmazon.IonDotnet
- CVE-2025-11549Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflowTenda W12
- CVE-2025-11371Gladinet CentreStack and TrioFox Local File Inclusion FlawGladinet CentreStack and TrioFox
- CVE-2025-60004Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crashJuniper Networks Junos OS
- CVE-2025-59975Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoSJuniper Networks Junos Space
- CVE-2025-59974Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerabilityJuniper Networks Junos Space Security Director
- CVE-2025-59968Junos Space Security Director: Insufficient authorization for sensitive resources in web interfaceJuniper Networks Junos Space Security Director · Juniper Ne…
- CVE-2025-59964Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restartJuniper Networks Junos OS
- CVE-2025-11198Security Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX ServerJuniper Networks Security Director Policy Enforcer
- CVE-2025-39664Path-Traversal in report schedulerCheckmk
- CVE-2025-32919Privilege Escalation in Windows License plugin for Checkmk Windows AgentCheckmk
- CVE-2025-11561Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemssssd · Red Hat Enterprise Linux +2
- CVE-2025-10240Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web applicationProgress Software Flowmon
- CVE-2025-10239Unintended command execution via troubleshooting scripts in Progress FlowmonProgress Software Flowmon
- CVE-2025-39963io_uring: fix incorrect io_kiocb reference in io_link_skbLinux
- CVE-2025-39962rxrpc: Fix untrusted unsigned subtractLinux
- CVE-2025-39961iommu/amd/pgtbl: Fix possible race while increase page table levelLinux
- CVE-2025-39960gpiolib: acpi: initialize acpi_gpio_info structLinux
- CVE-2025-10004Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-11340Incorrect Authorization in GitLabGitLab
- CVE-2025-39957wifi: mac80211: increase scan_ies_len for S1GLinux
- CVE-2025-39956igc: don't fail igc_probe() on LED setup errorLinux
- CVE-2025-10862Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'roxnor Popup builder with Gamification, Multi-Step Popups,…
- CVE-2025-6038Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Authenticated (Subscriber+) Privilege EscalationLisfinity Core - Lisfinity Core plugin used for pebas® Lisf…
- CVE-2025-47355Out-of-bounds Write in DSP ServiceQualcomm Snapdragon
- CVE-2025-47354Use After Free in DSP ServiceQualcomm Snapdragon
- CVE-2025-47351Integer Overflow or Wraparound in DSP ServiceQualcomm Snapdragon
- CVE-2025-47349Use of Out-of-range Pointer Offset in DSP ServiceQualcomm Snapdragon
- CVE-2025-47347Stack-based Buffer Overflow in Automotive Software platform based on QNXQualcomm Snapdragon
- CVE-2025-47342Use After Free in BT ControllerQualcomm Snapdragon
- CVE-2025-47341Buffer Copy Without Checking Size of Input in CameraQualcomm Snapdragon
- CVE-2025-47340Out-of-bounds Write in DSP ServiceQualcomm Snapdragon
- CVE-2025-47338Untrusted Pointer Dereference in DSP ServiceQualcomm Snapdragon
- CVE-2025-27060Untrusted Pointer Dereference in TZ FirmwareQualcomm Snapdragon
- CVE-2025-27059Use of Out-of-range Pointer Offset in TZ FirmwareQualcomm Snapdragon
- CVE-2025-27054Out-of-bounds Write in DisplayQualcomm Snapdragon
- CVE-2025-27053Incorrect Calculation of Buffer Size in HLOSQualcomm Snapdragon
- CVE-2025-27048Untrusted Pointer Dereference in CameraQualcomm Snapdragon
- CVE-2025-11528Tenda AC7 saveAutoQos stack-based overflowTenda AC7
- CVE-2025-11527Tenda AC7 fast_setting_pppoe_set stack-based overflowTenda AC7
- CVE-2025-11526Tenda AC7 WifiMacFilterSet stack-based overflowTenda AC7
- CVE-2025-10496Cookie Notice & Consent <= 1.6.5 - Unauthenticated Stored Cross-Site Scriptingchristophrado Cookie Notice & Consent
- CVE-2025-11525Tenda AC7 SetUpnpCfg stack-based overflowTenda AC7
- CVE-2025-11524Tenda AC7 SetDDNSCfg stack-based overflowTenda AC7
- CVE-2025-45095Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service wit
- CVE-2025-60375The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validat
- CVE-2025-61577D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi functi
Medium, low and unrated 88
- CVE-2025-61926Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secretossf allstar · github.com/ossf/allstar
- CVE-2025-62240Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Liferay Portal · Liferay DXP +1
- CVE-2025-11558code-projects E-Commerce Website user_index_search.php sql injectioncode-projects E-Commerce Website
- CVE-2025-11557projectworlds Gate Pass Management System add-pass.php sql injectionprojectworlds Gate Pass Management System
- CVE-2025-61783Python Social Auth - Django has unsafe account associationpython-social-auth social-app-django · social-auth-app-djan…
- CVE-2025-43296A logic issue was addressed with improved validation.Apple macOS
- CVE-2025-11556code-projects Simple Leave Manager user.php sql injectioncode-projects Simple Leave Manager
- CVE-2025-11555Campcodes Online Learning Management System calendar_of_events.php sql injectionCampcodes Online Learning Management System
- CVE-2025-35062Newforma Info Exchange (NIX) default anonymous accessNewforma Project Center
- CVE-2025-35060Newforma Info Exchange (NIX) stored XSS via SVG file uploadNewforma Project Center
- CVE-2025-35059Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspxNewforma Project Center
- CVE-2025-35057Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashxNewforma Project Center
- CVE-2025-35056Newforma Info Exchange (NIX) limited file readNewforma Project Center
- CVE-2025-35054Newforma Info Exchange (NIX) insufficiently protected credentialsNewforma Project Center
- CVE-2025-35053Newforma Info Exchange (NIX) arbitrary file read and deleteNewforma Project Center
- CVE-2025-35052Newforma Info Exchange (NIX) shared hard-coded secret keyNewforma Project Center
- CVE-2025-11554Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissionsPortabilis i-Educar
- CVE-2025-11553code-projects Courier Management System add-courier.php sql injectioncode-projects Courier Management System
- CVE-2025-11552code-projects Online Complaint Site category.php sql injectioncode-projects Online Complaint Site
- CVE-2025-4615PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-4614PAN-OS: Session Token Disclosure VulnerabilityPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2025-11551code-projects Student Result Manager Database.java sql injectioncode-projects Student Result Manager
- CVE-2025-60010Junos OS and Junos OS Evolved: Device allows login for user with expired passwordJuniper Networks Junos OS
- CVE-2025-60009Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-60006Junos OS Evolved: OS command injection vulnerabilities fixedJuniper Networks Junos OS Evolved
- CVE-2025-60002Junos Space: Template Definitions page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-60001Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-60000Junos Space: Generate Report page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59999Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59998Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59997Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59996Junos Space: Configuration View page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59995Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59994Junos Space: Quick Template page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59993Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59992Junos Space: Secure Console page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59991Junos Space: Device Management pages are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59990Junos Space: Template creation pages are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59989Junos Space: Device Discovery page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59988Junos Space: Generate Report page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59987Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59986Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59985Junos Space: Purging Policy field is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59984Junos Space: Global Search is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59983Junos Space: Template Definition page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59982Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59981Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
- CVE-2025-59980Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowedJuniper Networks Junos OS
- CVE-2025-59976Junos Space: Arbitrary file download vulnerability in web interfaceJuniper Networks Junos Space
- CVE-2025-59967Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restartsJuniper Networks Junos OS Evolved
- CVE-2025-10282GitLab Domain Confusion in gitlab Leaks API KeyBLSOPS bbot · bbot
- CVE-2025-10281Insecure URL Handling in git_clone Leading to Leaked API KeyBLSOPS bbot · bbot
- CVE-2025-59962Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashJuniper Networks Junos OS
- CVE-2025-59958Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the REJuniper Networks Junos OS Evolved
- CVE-2025-59957Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoorJuniper Networks Junos OS
- CVE-2025-52961Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restartJuniper Networks Junos OS Evolved
- CVE-2025-52960Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crashJuniper Networks Junos OS
- CVE-2025-32916Sensitive form data in URL query parametersCheckmk
- CVE-2025-36171IBM Aspera Faspex denial of serviceIBM Aspera Faspex
- CVE-2025-36225IBM Aspera Faspex information disclosureIBM Aspera Faspex
- CVE-2023-37401IBM Aspera Faspex cross-origin resource sharingIBM Aspera Faspex
- CVE-2025-62228Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC: SQL injection via maliciously crafted identifiersApache Software Foundation Apache Flink CDC · org.apache… +4
- CVE-2025-2934Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-9371Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'MuffinGroup Betheme
- CVE-2025-10249Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File ReadRevolution Slider Slider Revolution
- CVE-2025-39959ASoC: amd: acp: Fix incorrect retrival of acp_chip_infoLinux
- CVE-2025-39958iommu/s390: Make attach succeed when the device was surprise removedLinux
- CVE-2025-39955tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().Linux
- CVE-2025-39954clk: sunxi-ng: mp: Fix dual-divider clock rate readbackLinux
- CVE-2025-11530code-projects Online Complaint Site state.php sql injectioncode-projects Online Complaint Site
- CVE-2025-27049Buffer Over-read in CameraQualcomm Snapdragon
- CVE-2025-27045Buffer Over-read in VideoQualcomm Snapdragon
- CVE-2025-27041Buffer Over-read in VideoQualcomm Snapdragon
- CVE-2025-27040Improper Input Validation in TZ FirmwareQualcomm Snapdragon
- CVE-2025-27039Detection of Error Condition Without Action in Computer VisionQualcomm Snapdragon
- CVE-2025-11529ChurchCRM API Endpoint AuthMiddleware.php AuthMiddleware missing authenticationChurchCRM
- CVE-2025-11166WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Updatewpgmaps WP Go Maps
- CVE-2025-11523Tenda AC7 AdvSetLanip command injectionTenda AC7
- CVE-2025-11516code-projects Online Complaint Site complaint-details.php sql injectioncode-projects Online Complaint Site
- CVE-2025-11515code-projects Online Complaint Site register-complaint.php sql injectioncode-projects Online Complaint Site
- CVE-2025-11514code-projects Online Complaint Site index.php sql injectioncode-projects Online Complaint Site
- CVE-2025-56426An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the pri
- CVE-2025-60265In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQ
- CVE-2025-60266In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a
- CVE-2025-60267In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL
- CVE-2025-60302code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2025-60304code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Subject Description field.
- CVE-2025-61532Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on last_heard_page.php component