# CVEs published 2025-10-13

90 CVEs were published on October 13, 2025: 5 critical, 25 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-62365](https://cve.now/CVE-2025-62365.md): LibreNMS vulnerable to Reflected-XSS in \`report\_this\` function (CVSS 5.5, librenms · librenms/librenms)
- [CVE-2025-62363](https://cve.now/CVE-2025-62363.md): yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path (CVSS 7.8, zheny-creator YtGrabber-TUI)
- [CVE-2025-62362](https://cve.now/CVE-2025-62362.md): Name and e-mail of employee that has done a publication is discoverable in gpp-burgerportaal (CVSS 6.9, GPP-Woo GPP-burgerportaal)
- [CVE-2025-62361](https://cve.now/CVE-2025-62361.md): WeGIA Open Redirect Vulnerability in \`control.php\` endpoint \`nextPage\` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle) (CVSS 4.8, LabRedesCefetRJ WeGIA)
- [CVE-2025-62360](https://cve.now/CVE-2025-62360.md): WeGIA SQL Injection via 'id\_dependente' param at endpoint \`/html/funcionario/dependente\_documento.php\` (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-62251](https://cve.now/CVE-2025-62251.md): Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA through update 92 a (CVSS 4.8, Liferay Portal · Liferay DXP +1)
- [CVE-2025-62359](https://cve.now/CVE-2025-62359.md): WeGIA Cross-Site Scripting (XSS) Reflected endpoint id\_pet (CVSS 5.3, LabRedesCefetRJ WeGIA)
- [CVE-2025-62358](https://cve.now/CVE-2025-62358.md): WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao\_geral.php via log parameter (CVSS 5.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-62179](https://cve.now/CVE-2025-62179.md): WeGIA SQL Injection via 'cpf' param at endpoint \`/html/funcionario/cadastro\_funcionario\_pessoa\_existente.php\` (CVSS 8.6, LabRedesCefetRJ WeGIA)
- [CVE-2025-62384](https://cve.now/CVE-2025-62384.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62386](https://cve.now/CVE-2025-62386.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62383](https://cve.now/CVE-2025-62383.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62391](https://cve.now/CVE-2025-62391.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62178](https://cve.now/CVE-2025-62178.md): WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro\_atendido\_parentesco\_pessoa\_nova.php' parameter 'idatendido' (CVSS 3.5, LabRedesCefetRJ WeGIA)
- [CVE-2025-62385](https://cve.now/CVE-2025-62385.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62387](https://cve.now/CVE-2025-62387.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62388](https://cve.now/CVE-2025-62388.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62389](https://cve.now/CVE-2025-62389.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62390](https://cve.now/CVE-2025-62390.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62392](https://cve.now/CVE-2025-62392.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-62177](https://cve.now/CVE-2025-62177.md): WeGIA vulnerable to SQL Injection via 'id\_funcionario' param at endpoint \`/html/funcionario/dependente\_listar.php\` (CVSS 8.6, LabRedesCefetRJ WeGIA)
- [CVE-2025-11623](https://cve.now/CVE-2025-11623.md): SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the data (CVSS 6.5, Ivanti Endpoint Manager)
- [CVE-2025-9713](https://cve.now/CVE-2025-9713.md): Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. (CVSS 8.8, Ivanti Endpoint Manager)
- [CVE-2025-11622](https://cve.now/CVE-2025-11622.md): Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileg (CVSS 7.8, Ivanti Endpoint Manager)
- [CVE-2025-62176](https://cve.now/CVE-2025-62176.md): Mastadon streaming server allows OAuth clients without the \`read\` scope to subscribe to public channels (CVSS 4.3, mastodon)
- [CVE-2025-62175](https://cve.now/CVE-2025-62175.md): Mastodon streaming API fails to disconnect disabled and suspended users (CVSS 4.3, mastodon)
- [CVE-2025-62174](https://cve.now/CVE-2025-62174.md): Mastodon allows continued access after password reset via CLI (CVSS 3.5, mastodon)
- [CVE-2025-61688](https://cve.now/CVE-2025-61688.md): Omni leaks information via the API (CVSS 8.6, siderolabs omni · github.com/siderolabs/omni)
- [CVE-2025-59836](https://cve.now/CVE-2025-59836.md): Omni is Vulnerable to DoS via Empty Create/Update Resource Requests (CVSS 5.3, siderolabs omni · github.com/siderolabs/omni)
- [CVE-2025-62252](https://cve.now/CVE-2025-62252.md): Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay (CVSS 5.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-62364](https://cve.now/CVE-2025-62364.md): text-generation-webui allows arbitrary file read via symbolic link upload (CVSS 6.2, oobabooga text-generation-webui)
- [CVE-2025-62246](https://cve.now/CVE-2025-62246.md): Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Li (CVSS 4.8, Liferay Portal · Liferay DXP +1)
- [CVE-2025-58084](https://cve.now/CVE-2025-58084.md): Mattermost Desktop App crashes when clicking on malformed external URL (CVSS 3.5, Mattermost)
- [CVE-2025-62241](https://cve.now/CVE-2025-62241.md): Insecure Direct Object Reference (IDOR) vulnerability with shipment addresses in Liferay DXP 2023.Q4.1 through 2023.Q4.5 allows remote authe (CVSS 5.3, Liferay DXP · com.liferay.commerce:com.liferay.commerce.ord…)
- [CVE-2025-62242](https://cve.now/CVE-2025-62242.md): Insecure Direct Object Reference (IDOR) vulnerability with account addresses in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 20 (CVSS 5.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-62170](https://cve.now/CVE-2025-62170.md): rAthena map-server use-after-free vulnerability in RODEX (CVSS 7.5, rathena)
- [CVE-2025-61775](https://cve.now/CVE-2025-61775.md): Vickey's unexpired email confirmation link can be reused to send repeated confirmation emails (CVSS 6.9, Whimsies-YAT Vickey)
- [CVE-2025-62243](https://cve.now/CVE-2025-62243.md): Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 t (CVSS 5.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-62244](https://cve.now/CVE-2025-62244.md): Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0 t (CVSS 4.8, Liferay Portal · Liferay DXP +1)
- [CVE-2025-11695](https://cve.now/CVE-2025-11695.md): Configuration may unexpectedly disable certificate validation (CVSS 8.0, MongoDB Rust Driver · mongodb)
- [CVE-2025-7707](https://cve.now/CVE-2025-7707.md): World-Writable NLTK Cache Directory Vulnerability in run-llama/llama\_index (CVSS 7.1, run-llama/llama\_index · llama-index)
- [CVE-2025-43991](https://cve.now/CVE-2025-43991.md): SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Li (CVSS 6.3, Dell SupportAssist for Home PCs · Dell SupportAssist for Bu…)
- [CVE-2025-39965](https://cve.now/CVE-2025-39965.md): xfrm: xfrm\_alloc\_spi shouldn't use 0 as SPI (CVSS 7.8, Linux)
- [CVE-2025-39964](https://cve.now/CVE-2025-39964.md): crypto: af\_alg - Disallow concurrent writes in af\_alg\_sendmsg (CVSS 7.8, KEV, Linux)
- [CVE-2025-37729](https://cve.now/CVE-2025-37729.md): Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine (CVSS 9.1, Elastic Cloud Enterprise)
- [CVE-2025-9902](https://cve.now/CVE-2025-9902.md): IDOR in Akınsoft QRMenu (CVSS 7.5, AKIN Software Computer Import Export Industry and Trade Co.…)
- [CVE-2025-6919](https://cve.now/CVE-2025-6919.md): SQLi in Cats Informatics' Aykome (CVSS 9.8, Cats Information Technology Software Development Technologi…)
- [CVE-2025-10720](https://cve.now/CVE-2025-10720.md): WP Private Content Plus \<= 3.6.2 - Password Protection Bypass (CVSS 6.5, WP Private Content Plus)
- [CVE-2025-9337](https://cve.now/CVE-2025-9337.md): A null pointer dereference has been identified in the AsIO3.sys driver. (CVSS 6.8, ASUS Armoury Crate)
- [CVE-2025-9336](https://cve.now/CVE-2025-9336.md): A stack buffer overflow has been identified in the AsIO3.sys driver. (CVSS 6.8, ASUS Armoury Crate)
- [CVE-2025-11184](https://cve.now/CVE-2025-11184.md): Cross-Site Scripting Vulnerability in QWC2 Registration GUI (CVSS 6.9, qwc-services qwc-registration-gui)
- [CVE-2025-11183](https://cve.now/CVE-2025-11183.md): Cross-Site Scripting Vulnerability in QWC2 (CVSS 6.9, QGIS QWC2 · qwc2)
- [CVE-2025-9968](https://cve.now/CVE-2025-9968.md): A link following vulnerability exists in the UnifyScanner component of Armoury Crate. (CVSS 8.5, ASUS Armoury Crate)
- [CVE-2025-11668](https://cve.now/CVE-2025-11668.md): code-projects Automated Voting System update\_user.php sql injection (CVSS 5.1, code-projects Automated Voting System)
- [CVE-2025-11675](https://cve.now/CVE-2025-11675.md): Ragic｜Enterprise Cloud Database - Arbitrary File Upload (CVSS 7.2, Ragic Enterprise Cloud Database)
- [CVE-2025-11674](https://cve.now/CVE-2025-11674.md): PiExtract｜SOOP-CLM - Server-Side Request Forgery (CVSS 6.9, PiExtract SOOP-CLM)
- [CVE-2025-10558](https://cve.now/CVE-2025-10558.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes 3DSwymer)
- [CVE-2025-10557](https://cve.now/CVE-2025-10557.md): Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes ENOVIA Collaborative Industry Innovator)
- [CVE-2025-10556](https://cve.now/CVE-2025-10556.md): Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes ENOVIA Specification Manager)
- [CVE-2025-10552](https://cve.now/CVE-2025-10552.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes 3DSwymer)
- [CVE-2025-11673](https://cve.now/CVE-2025-11673.md): PiExtract ｜SOOP-CLM - Hidden Functionality (CVSS 8.6, PiExtract SOOP-CLM)
- [CVE-2025-9976](https://cve.now/CVE-2025-9976.md): OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 9.0, Dassault Systèmes Station Launcher App in 3DEXPERIENCE plat…)
- [CVE-2025-11672](https://cve.now/CVE-2025-11672.md): EBM Technologies｜Uniweb/SoliPACS WebServer - Missing Authentication (CVSS 6.9, EBM Technologies Uniweb/SoliPACS WebServer)
- [CVE-2025-11667](https://cve.now/CVE-2025-11667.md): code-projects Automated Voting System add\_candidate\_modal.php. sql injection (CVSS 5.3, code-projects Automated Voting System)
- [CVE-2025-11671](https://cve.now/CVE-2025-11671.md): EBM Technologies｜Uniweb/SoliPACS WebServer - Missing Authentication (CVSS 5.3, EBM Technologies Uniweb/SoliPACS WebServer)
- [CVE-2025-11666](https://cve.now/CVE-2025-11666.md): Tenda RP3 Pro Firmware Update force\_upgrade.sh hard-coded password (CVSS 8.4, Tenda RP3 Pro)
- [CVE-2025-8915](https://cve.now/CVE-2025-8915.md): Hardcoded TLS private key in Kiloview N30 firmware (CVSS 8.7, Kiloview N30)
- [CVE-2025-9265](https://cve.now/CVE-2025-9265.md): API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products (CVSS 10.0, Kiloview NDI)
- [CVE-2025-11665](https://cve.now/CVE-2025-11665.md): D-Link DAP-2695 Firmware Update rgbin fwupdater\_main os command injection (CVSS 5.1, D-Link DAP-2695)
- [CVE-2025-0636](https://cve.now/CVE-2025-0636.md): Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller (CVSS 8.4, Ericsson Site Controller · Ericsson RAN Compute)
- [CVE-2025-27258](https://cve.now/CVE-2025-27258.md): Ericsson Network Manager: escalation of privilege vulnerability (CVSS 6.9, Ericsson Network Manager)
- [CVE-2025-27259](https://cve.now/CVE-2025-27259.md): Ericsson Network Manager: improper neutralization of user controlled input (CVSS 2.4, Ericsson Network Manager)
- [CVE-2025-11664](https://cve.now/CVE-2025-11664.md): Campcodes Online Beauty Parlor Management System search-appointment.php sql injection (CVSS 5.1, Campcodes Online Beauty Parlor Management System)
- [CVE-2025-9698](https://cve.now/CVE-2025-9698.md): The Plus Addons for Elementor \< 6.3.16 - Author+ Stored XSS (CVSS 6.8, The Plus Addons for Elementor)
- [CVE-2025-11663](https://cve.now/CVE-2025-11663.md): Campcodes Online Beauty Parlor Management System manage-services.php sql injection (CVSS 5.1, Campcodes Online Beauty Parlor Management System)
- [CVE-2025-11662](https://cve.now/CVE-2025-11662.md): SourceCodester Best Salon Management System booking.php sql injection (CVSS 6.9, SourceCodester Best Salon Management System)
- [CVE-2025-31995](https://cve.now/CVE-2025-31995.md): HCL Unica MaxAI Workbench is vulnerable to improper input validation (CVSS 3.5, HCL Software MaxAI Workbench)
- [CVE-2025-11661](https://cve.now/CVE-2025-11661.md): ProjectsAndPrograms School Management System missing authentication (CVSS 6.9, ProjectsAndPrograms School Management System)
- [CVE-2025-11660](https://cve.now/CVE-2025-11660.md): ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload (CVSS 6.9, ProjectsAndPrograms School Management System)
- [CVE-2025-31994](https://cve.now/CVE-2025-31994.md): HCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS) (CVSS 4.3, HCL Software Unica Campaign)
- [CVE-2025-31996](https://cve.now/CVE-2025-31996.md): Unprotected files are impacting HCL Unica Platform (CVSS 5.3, HCL Software Unica Platform)
- [CVE-2025-11659](https://cve.now/CVE-2025-11659.md): ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload (CVSS 6.9, ProjectsAndPrograms School Management System)
- [CVE-2025-11658](https://cve.now/CVE-2025-11658.md): ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload (CVSS 6.9, ProjectsAndPrograms School Management System)
- [CVE-2025-11657](https://cve.now/CVE-2025-11657.md): ProjectsAndPrograms School Management System createNotice.php unrestricted upload (CVSS 6.9, ProjectsAndPrograms School Management System)
- [CVE-2025-11656](https://cve.now/CVE-2025-11656.md): ProjectsAndPrograms School Management System editNotes.php unrestricted upload (CVSS 6.9, ProjectsAndPrograms School Management System)
- [CVE-2025-11655](https://cve.now/CVE-2025-11655.md): Total.js Flow SVG File unrestricted upload (CVSS 5.1, Total.js Flow)
- [CVE-2025-11654](https://cve.now/CVE-2025-11654.md): yousaf530 Inferno Online Clothing Store log.php sql injection (CVSS 6.9, yousaf530 Inferno Online Clothing Store)
- [CVE-2025-36087](https://cve.now/CVE-2025-36087.md): IBM Security Verify Access hard coded credentials (CVSS 8.1, IBM Security Verify Access · IBM Verify Identity Access Con…)
- [CVE-2025-11653](https://cve.now/CVE-2025-11653.md): UTT HiPER 2620G fNTP strcpy buffer overflow (CVSS 8.7, UTT HiPER)
- [CVE-2025-11652](https://cve.now/CVE-2025-11652.md): UTT 进取 518G formTaskEdit\_ap buffer overflow (CVSS 8.7, UTT 进取)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.