CVEs published October 12, 2025
36 CVEs were published on October 12, 2025: 0 critical, 3 high. 1 is now in CISA KEV.
- Published
- 36
- Critical
- 0
- High
- 3
- Medium
- 20
- Low
- 13
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 4
Most affected products
- Tomofun Furbo
- 17
- IBM Engineering Requirements Management Doors Next
- 4
- HCL Software Unica Centralized Offer Management
- 3
- HCL Software Unica Platform
- 3
- RainyGao DocSys
- 3
- HCL Software MaxAI Assistant
- 1
- HCL Software Unica
- 1
- jimit105 Project-Online-Shopping-Website
- 1
- Oracle Configurator
- 1
- Tomofun Furbo Mobile App
- 1
High 3
Medium, low and unrated 33
- CVE-2025-11650Tomofun Furbo 360/Furbo Mini Password shadow weak hashTomofun Furbo
- CVE-2025-11648Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgeryTomofun Furbo
- CVE-2025-11647Tomofun Furbo 360/Furbo Mini GATT Service information disclosureTomofun Furbo
- CVE-2025-11646Tomofun Furbo 360/Furbo Mini GATT Service access controlTomofun Furbo
- CVE-2025-11645Tomofun Furbo Mobile App Authentication Token sensitive informationTomofun Furbo Mobile App
- CVE-2025-11644Tomofun Furbo 360/Furbo Mini UART sensitive informationTomofun Furbo
- CVE-2025-11643Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentialsTomofun Furbo
- CVE-2025-11642Tomofun Furbo 360/Furbo Mini Registration denial of serviceTomofun Furbo
- CVE-2025-11641Tomofun Furbo 360/Furbo Mini Trial Restriction access controlTomofun Furbo
- CVE-2025-11640Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmissionTomofun Furbo
- CVE-2025-11639Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive informationTomofun Furbo
- CVE-2025-11638Tomofun Furbo 360/Furbo Mini Bluetooth denial of serviceTomofun Furbo
- CVE-2025-11637Tomofun Furbo 360 Audio race conditionTomofun Furbo
- CVE-2025-11636Tomofun Furbo 360 Account server-side request forgeryTomofun Furbo
- CVE-2025-11635Tomofun Furbo 360 File Upload resource consumptionTomofun Furbo
- CVE-2025-2138IBM Engineering Requirements Management Doors Next data modificationIBM Engineering Requirements Management Doors Next
- CVE-2025-2139IBM Engineering Requirements Management Doors Next security bypassIBM Engineering Requirements Management Doors Next
- CVE-2025-2140IBM Engineering Requirements Management Doors Next spoofingIBM Engineering Requirements Management Doors Next
- CVE-2025-33096IBM Engineering Requirements Management Doors Next denial of serviceIBM Engineering Requirements Management Doors Next
- CVE-2025-11634Tomofun Furbo 360/Furbo Mini UART information disclosureTomofun Furbo
- CVE-2025-11633Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validationTomofun Furbo
- CVE-2025-52615HCL Unica Platform is impacted by misconfigured security related HTTP headersHCL Software Unica Platform
- CVE-2025-11631RainyGao DocSys deleteDoc.do path traversalRainyGao DocSys
- CVE-2025-52614HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerabilityHCL Software Unica Platform
- CVE-2025-31969HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)HCL Software Unica Platform
- CVE-2025-11630RainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversalRainyGao DocSys
- CVE-2025-11629RainyGao DocSys getUserList.do getUserList sql injectionRainyGao DocSys
- CVE-2025-31992HCL MaxAI Assistant is susceptible to a HTML injection vulnerabilityHCL Software MaxAI Assistant
- CVE-2025-11628jimit105 Project-Online-Shopping-Website Product Inventory delete.php sql injectionjimit105 Project-Online-Shopping-Website
- CVE-2025-52616HCL Unica 12.1.10 is affected by an exposure of sensitive informationHCL Software Unica
- CVE-2025-31998HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive informationHCL Software Unica Centralized Offer Management
- CVE-2025-31997HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)HCL Software Unica Centralized Offer Management
- CVE-2025-31993HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)HCL Software Unica Centralized Offer Management