# CVEs published 2025-10-15 187 CVEs were published on October 15, 2025: 15 critical, 83 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2025-43282](https://cve.now/CVE-2025-43282.md): A double free issue was addressed with improved memory management. (CVSS 5.5, Apple iOS and iPadOS · Apple iPadOS +4) - [CVE-2025-43313](https://cve.now/CVE-2025-43313.md): A logic issue was addressed with improved restrictions. (CVSS 5.5, Apple macOS) - [CVE-2025-43280](https://cve.now/CVE-2025-43280.md): The issue was resolved by not loading remote images. (CVSS 4.7, Apple iOS and iPadOS) - [CVE-2025-43281](https://cve.now/CVE-2025-43281.md): The issue was addressed with improved authentication. (CVSS 7.8, Apple macOS) - [CVE-2025-11619](https://cve.now/CVE-2025-11619.md): Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers in MitM position to (CVSS 8.8, Devolutions Server) - [CVE-2025-11568](https://cve.now/CVE-2025-11568.md): Luksmeta: data corruption when handling luks1 partitions with luksmeta (CVSS 4.4, Latchset luksmeta · Red Hat Enterprise Linux +1) - [CVE-2025-62375](https://cve.now/CVE-2025-62375.md): go-witness Improper Verification of AWS EC2 Identity Documents (CVSS 6.9, in-toto go-witness · github.com/in-toto/go-witness) - [CVE-2025-11832](https://cve.now/CVE-2025-11832.md): APIs Lack Rate Limiting (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…) - [CVE-2025-62371](https://cve.now/CVE-2025-62371.md): OpenSearch Data Prepper plugins trusts all SSL certificates by default (CVSS 7.4, opensearch-project data-prepper · org.opensearch.datapreppe…) - [CVE-2025-62410](https://cve.now/CVE-2025-62410.md): --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom (CVSS 9.4, capricorn86 happy-dom · happy-dom) - [CVE-2025-62381](https://cve.now/CVE-2025-62381.md): sveltekit-superforms Prototype Pollution in \`parseFormData\` function of \`formData.js\` (CVSS 8.3, ciscoheat sveltekit-superforms · sveltekit-superforms) - [CVE-2025-62382](https://cve.now/CVE-2025-62382.md): Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image\_path" parameter (CVSS 7.7, blakeblackshear frigate) - [CVE-2025-62378](https://cve.now/CVE-2025-62378.md): CommandKit exposes incorrect command name in context object for message command aliases (CVSS 6.1, underctrl-io commandkit · commandkit) - [CVE-2025-10577](https://cve.now/CVE-2025-10577.md): Sound Research SECOMNService Escalation of Privilege (CVSS 8.5, HP Sound Research) - [CVE-2025-10576](https://cve.now/CVE-2025-10576.md): Sound Research SECOMNService Escalation of Privilege (CVSS 8.5, HP Sound Research) - [CVE-2025-62380](https://cve.now/CVE-2025-62380.md): Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails (CVSS 2.9, eladnava mailgen · mailgen) - [CVE-2025-54271](https://cve.now/CVE-2025-54271.md): Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) (CVSS 5.6, Adobe Creative Cloud Desktop) - [CVE-2025-20360](https://cve.now/CVE-2025-20360.md): Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerability (CVSS 5.8, Cisco Cyber Vision · Cisco Secure Firewall Threat Defense (…) - [CVE-2025-20359](https://cve.now/CVE-2025-20359.md): Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability (CVSS 6.5, Cisco Cyber Vision · Cisco Secure Firewall Threat Defens… +1) - [CVE-2025-20351](https://cve.now/CVE-2025-20351.md): Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Session Initiation Protocol (SIP) Software) - [CVE-2025-20350](https://cve.now/CVE-2025-20350.md): Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability (CVSS 7.5, Cisco Session Initiation Protocol (SIP) Software) - [CVE-2025-20329](https://cve.now/CVE-2025-20329.md): Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability (CVSS 4.9, Cisco RoomOS Software) - [CVE-2025-58133](https://cve.now/CVE-2025-58133.md): Zoom Rooms Clients - Authentication Bypass (CVSS 5.3, Zoom Communications Zoom Rooms) - [CVE-2025-58132](https://cve.now/CVE-2025-58132.md): Zoom Clients for Windows - Command Injection (CVSS 4.1, Zoom Communications Zoom Clients for Windows) - [CVE-2025-62379](https://cve.now/CVE-2025-62379.md): Open Redirect in reflex-dev/reflex (CVSS 3.1, reflex-dev reflex · reflex) - [CVE-2025-59419](https://cve.now/CVE-2025-59419.md): Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery (CVSS 5.5, netty · io.netty:netty-codec-smtp) - [CVE-2025-62370](https://cve.now/CVE-2025-62370.md): Alloy Core has a DoS vulnerability on \`alloy\_dyn\_abi::TypedData\` hashing (CVSS 7.5, alloy-rs core · alloy-dyn-abi) - [CVE-2025-2529](https://cve.now/CVE-2025-2529.md): IBM Terracotta denial of service (CVSS 2.9, IBM Terracotta) - [CVE-2025-61990](https://cve.now/CVE-2025-61990.md): TMM vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-57780](https://cve.now/CVE-2025-57780.md): F5OS Vulnerability (CVSS 8.8, F5OS - Appliance · F5OS - Chassis) - [CVE-2025-61933](https://cve.now/CVE-2025-61933.md): BIG-IP APM cross-site scripting (XSS) vulnerability (CVSS 6.1, F5 BIG-IP) - [CVE-2025-58071](https://cve.now/CVE-2025-58071.md): BIG-IP IPSec vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-61935](https://cve.now/CVE-2025-61935.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-53860](https://cve.now/CVE-2025-53860.md): F5OS-A FIPS HSM vulnerability (CVSS 4.1, F5OS - Appliance) - [CVE-2025-10699](https://cve.now/CVE-2025-10699.md): A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure. (CVSS 6.0, Lenovo LeCloud Client) - [CVE-2025-10581](https://cve.now/CVE-2025-10581.md): A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a lo (CVSS 8.5, Lenovo PC Manager) - [CVE-2025-9548](https://cve.now/CVE-2025-9548.md): A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated (CVSS 6.8, Lenovo Power Management Driver) - [CVE-2025-8486](https://cve.now/CVE-2025-8486.md): A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges. (CVSS 8.5, Lenovo PC Manager) - [CVE-2025-6026](https://cve.now/CVE-2025-6026.md): An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of (CVSS 2.3, Lenovo Universal Device Client) - [CVE-2025-55083](https://cve.now/CVE-2025-55083.md): Broken bounds check in Broken bounds check in \_nx\_secure\_tls\_process\_clienthello\_psk\_extension() (CVSS 6.9, Eclipse Foundation NetX Duo) - [CVE-2025-60015](https://cve.now/CVE-2025-60015.md): F5OS out-of-bounds write vulnerability (CVSS 5.7, F5OS - Appliance · F5OS - Chassis) - [CVE-2025-54755](https://cve.now/CVE-2025-54755.md): BIG-IP Configuration utility vulnerability (CVSS 4.9, F5 BIG-IP) - [CVE-2025-59483](https://cve.now/CVE-2025-59483.md): BIG-IP Configuration utility and tmsh vulnerability (CVSS 6.5, F5 BIG-IP) - [CVE-2025-61974](https://cve.now/CVE-2025-61974.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-59481](https://cve.now/CVE-2025-59481.md): BIG-IP iControl REST and tmsh vulnerability (CVSS 8.7, F5 BIG-IP) - [CVE-2025-61960](https://cve.now/CVE-2025-61960.md): BIG-IP APM portal access vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-61955](https://cve.now/CVE-2025-61955.md): F5OS vulnerability (CVSS 8.8, F5OS - Appliance · F5OS - Chassis) - [CVE-2025-54854](https://cve.now/CVE-2025-54854.md): BigIP APM Vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-61958](https://cve.now/CVE-2025-61958.md): BIG-IP TMSH vulnerability (CVSS 8.7, F5 BIG-IP) - [CVE-2025-53521](https://cve.now/CVE-2025-53521.md): BigIP APM Vulnerability (CVSS 9.8, KEV, F5 BIG-IP) - [CVE-2025-58096](https://cve.now/CVE-2025-58096.md): BIG-IP TMM vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-54858](https://cve.now/CVE-2025-54858.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-53868](https://cve.now/CVE-2025-53868.md): BIG-IP SCP and SFTP vulnerability (CVSS 8.7, F5 BIG-IP) - [CVE-2025-58120](https://cve.now/CVE-2025-58120.md): BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability (CVSS 7.5, F5 BIG-IP Next SPK · F5 BIG-IP Next CNF +1) - [CVE-2025-60013](https://cve.now/CVE-2025-60013.md): F5OS-A FIPS HSM password vulnerability (CVSS 4.6, F5OS - Appliance) - [CVE-2025-61951](https://cve.now/CVE-2025-61951.md): BIG-IP DTLS 1.2 Vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-53856](https://cve.now/CVE-2025-53856.md): TMM vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-54479](https://cve.now/CVE-2025-54479.md): BIG-IP PEM vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-59778](https://cve.now/CVE-2025-59778.md): VELOS partition container network vulnerability (CVSS 7.5, F5OS - Chassis) - [CVE-2025-54805](https://cve.now/CVE-2025-54805.md): TMM Vulnerability (CVSS 6.5, F5 BIG-IP Next SPK · F5 BIG-IP Next CNF +1) - [CVE-2025-55670](https://cve.now/CVE-2025-55670.md): BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability (CVSS 6.5, F5 BIG-IP Next SPK · F5 BIG-IP Next CNF +1) - [CVE-2025-41430](https://cve.now/CVE-2025-41430.md): BIG-IP SSL Orchestrator vulnerability (CVSS 7.5, F5 BIG-IP · F5 SSL Orchestrator) - [CVE-2025-61938](https://cve.now/CVE-2025-61938.md): BIG-IP Advanced WAF and ASM bd process vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-58424](https://cve.now/CVE-2025-58424.md): BIG-IP TMM vulnerability (CVSS 5.3, F5 BIG-IP) - [CVE-2025-55036](https://cve.now/CVE-2025-55036.md): BIG-IP SSL Orchestrator vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-59781](https://cve.now/CVE-2025-59781.md): BIG-IP DNS cache vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-47150](https://cve.now/CVE-2025-47150.md): F5OS SNMP vulnerability (CVSS 6.5, F5OS - Appliance · F5OS - Chassis) - [CVE-2025-46706](https://cve.now/CVE-2025-46706.md): BIG-IP iRules vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-55669](https://cve.now/CVE-2025-55669.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-48008](https://cve.now/CVE-2025-48008.md): BIG-IP MPTCP vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-58153](https://cve.now/CVE-2025-58153.md): BIG-IP HSB vulnerability (CVSS 5.9, F5 BIG-IP) - [CVE-2025-60016](https://cve.now/CVE-2025-60016.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-59478](https://cve.now/CVE-2025-59478.md): BIG-IP AFM DoS protection profile vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-58474](https://cve.now/CVE-2025-58474.md): BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability (CVSS 5.3, F5 BIG-IP · F5 NGINX App Protect WAF) - [CVE-2025-47148](https://cve.now/CVE-2025-47148.md): BIG-IP APM and SSL Orchestrator vulnerability (CVSS 6.5, F5 BIG-IP) - [CVE-2025-59269](https://cve.now/CVE-2025-59269.md): BIG-IP Configuration utility XSS vulnerability (CVSS 6.1, F5 BIG-IP) - [CVE-2025-59268](https://cve.now/CVE-2025-59268.md): BIG-IP Configuration utility vulnerability (CVSS 5.3, F5 BIG-IP) - [CVE-2025-53474](https://cve.now/CVE-2025-53474.md): BIG-IP iRules vulnerability (CVSS 7.5, F5 BIG-IP) - [CVE-2025-9640](https://cve.now/CVE-2025-9640.md): Samba: vfs\_streams\_xattr uninitialized memory write possible (CVSS 4.3, samba · Red Hat Enterprise Linux +1) - [CVE-2025-10869](https://cve.now/CVE-2025-10869.md): Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot (CVSS 5.3, Oct8ne Chatbot) - [CVE-2025-55082](https://cve.now/CVE-2025-55082.md): Potential out of bound read and info leak in\_nx\_secure\_tls\_psk\_identity\_find() (CVSS 6.9, Eclipse Foundation NetX Duo) - [CVE-2025-55081](https://cve.now/CVE-2025-55081.md): Potential out of bound read in \_nx\_secure\_tls\_process\_clienthello() (CVSS 6.9, Eclipse Foundation NetX Duo) - [CVE-2025-10682](https://cve.now/CVE-2025-10682.md): TARIFFUXX \<= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx\_configurator Shortcode (CVSS 6.5, TARIFFUXX) - [CVE-2025-10194](https://cve.now/CVE-2025-10194.md): Shortcode Button \<= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, eflyjason Shortcode Button) - [CVE-2025-11701](https://cve.now/CVE-2025-11701.md): Zip Attachments \<= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure (CVSS 5.3, quicoto Zip Attachments) - [CVE-2025-10141](https://cve.now/CVE-2025-10141.md): Digiseller \<= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Digiseller) - [CVE-2025-10056](https://cve.now/CVE-2025-10056.md): Task Scheduler \<= 1.6.3 - Authenticated (Admin+) Blind Server-Side Request Forgery (CVSS 4.4, miunosoft Task Scheduler) - [CVE-2025-11728](https://cve.now/CVE-2025-11728.md): Oceanpayment CreditCard Gateway \<= 6.0 - Missing Authentication to Unauthenticated Order Status Update (CVSS 5.3, Oceanpayment CreditCard Gateway) - [CVE-2025-10313](https://cve.now/CVE-2025-10313.md): Find And Replace content for WordPress \<= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, jankimoradiya Find And Replace content for WordPress) - [CVE-2025-11196](https://cve.now/CVE-2025-11196.md): External Login \<= 1.11.2 - Authenticated (Subscriber+) Sensitive Data Exposure via Test Connection (CVSS 4.3, tbenyon External Login) - [CVE-2025-10486](https://cve.now/CVE-2025-10486.md): Content Writer \<= 3.6.8 - Unauthenticated Information Exposure via Log File (CVSS 5.3, steadycontent Content Writer) - [CVE-2025-10294](https://cve.now/CVE-2025-10294.md): OwnID Passwordless Login \<= 1.3.4 - Authentication Bypass (CVSS 9.8, victornavarro OwnID Passwordless Login) - [CVE-2025-9967](https://cve.now/CVE-2025-9967.md): Orion SMS OTP Verification \<= 1.1.7 - Authentication Bypass via Account Takeover (CVSS 9.8, gsayed786 Orion SMS OTP Verification.) - [CVE-2025-10140](https://cve.now/CVE-2025-10140.md): Quick Social Login \<= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, andreiigna Quick Social Login) - [CVE-2025-11692](https://cve.now/CVE-2025-11692.md): Zip Attachments \<= 1.6 - Missing Authorization to Limited File Deletion (CVSS 5.3, quicoto Zip Attachments) - [CVE-2025-11365](https://cve.now/CVE-2025-11365.md): WP Google Map Plugin \<= 1.0 - Authenticated (Contributor+) SQL Injection (CVSS 6.5, akbrohi WP Google Map Plugin) - [CVE-2025-10303](https://cve.now/CVE-2025-10303.md): Library Management System \<= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation (CVSS 4.3, owthub Library Management System) - [CVE-2025-10312](https://cve.now/CVE-2025-10312.md): Theme Importer \<= 1.0 - Cross-Site Request Forgery (CVSS 4.3, steve-forster Theme Importer) - [CVE-2025-10300](https://cve.now/CVE-2025-10300.md): TopBar \<= 1.0.0 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, fmeaddons TopBar) - [CVE-2025-10135](https://cve.now/CVE-2025-10135.md): WP ViewSTL \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, falldeaf WP ViewSTL) - [CVE-2025-10038](https://cve.now/CVE-2025-10038.md): Binary MLM Plan \<= 3.0 - Unauthenticated Limited Privilege Escalation (CVSS 6.5, letscms Binary MLM Plan) - [CVE-2025-10132](https://cve.now/CVE-2025-10132.md): Dhivehi Text \<= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, dash8x Dhivehi Text) - [CVE-2025-10743](https://cve.now/CVE-2025-10743.md): Outdoor \<= 1.3.2 - Unauthenticated SQL Injection (CVSS 7.5, maycorolbuche1 Outdoor) - [CVE-2025-11722](https://cve.now/CVE-2025-11722.md): Category and Products Accordion Panel \<= 1.0 - Authenticated (Contributor+) Local File Inclusion (CVSS 7.5, ikhodal Woocommerce Category and Products Accordion Panel) - [CVE-2025-10133](https://cve.now/CVE-2025-10133.md): URLYar \<= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, salamzadeh URLYar URL Shortner) - [CVE-2025-10299](https://cve.now/CVE-2025-10299.md): WPBifröst – Instant Passwordless Temporary Login Links \<= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, hakik Bifröst – Instant Passwordless Temporary Login Links) - [CVE-2025-11177](https://cve.now/CVE-2025-11177.md): External Login \<= 1.11.2 - Unauthenticated SQL Injection via log (CVSS 7.5, tbenyon External Login) - [CVE-2025-10051](https://cve.now/CVE-2025-10051.md): Demo Import Kit \<= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2, themeinwp Demo Import Kit) - [CVE-2025-10041](https://cve.now/CVE-2025-10041.md): Flex QR Code Generator \<= 1.2.5 - Unauthenticated Arbitrary File Upload (CVSS 9.8, ajitdas Flex QR Code Generator) - [CVE-2025-10186](https://cve.now/CVE-2025-10186.md): WhyDonate – FREE Donate button – Crowdfunding – Fundraising \<= 4.0.15 - Missing Authorization to Unauthenticated wp\_wdplugin\_style Rww Deletion (CVSS 5.3, jjlemstra WhyDonate – FREE Donate button – Crowdfunding – F…) - [CVE-2025-10575](https://cve.now/CVE-2025-10575.md): WP jQuery Pager \<= 1.4.0 - Authenticated (Contributor+) SQL Injection via Shortcode (CVSS 6.5, ivycat WP jQuery Pager) - [CVE-2025-10301](https://cve.now/CVE-2025-10301.md): FunKItools \<= 1.0.2 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, flenskiproject FunKItools) - [CVE-2025-10730](https://cve.now/CVE-2025-10730.md): Wp tabber widget \<= 4.0 - Authenticated (Contributor+) SQL Injection (CVSS 6.5, gopiplushotmailcom Wp tabber widget) - [CVE-2025-10045](https://cve.now/CVE-2025-10045.md): onOffice for WP-Websites \<= 6.5.1 - Authenticated (Editor+) SQL Injection (CVSS 4.9, onofficeweb onOffice for WP-Websites) - [CVE-2025-10310](https://cve.now/CVE-2025-10310.md): Rich Snippet Site Report \<= 2.0.0105 - Authenticated (Admin+) SQL Injection (CVSS 4.9, jayce53 Rich Snippet Site Report) - [CVE-2025-10660](https://cve.now/CVE-2025-10660.md): WP Dashboard Chat \<= 1.0.3 - Authenticated (Contributor+) SQL Injection via id (CVSS 6.5, nicholasbosch WP Dashboard Chat) - [CVE-2025-10648](https://cve.now/CVE-2025-10648.md): Login with YourMembership - YM SSO Login \<= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym\_display\_test\_attributes' (CVSS 5.3, cyberlord92 Login with YourMembership – YM SSO Login) - [CVE-2025-10293](https://cve.now/CVE-2025-10293.md): Keyy Two Factor Authentication (like Clef) \<= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover (CVSS 8.8, nexist Keyy Two Factor Authentication) - [CVE-2025-10139](https://cve.now/CVE-2025-10139.md): WP BookWidgets \<= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, remko WP BookWidgets) - [CVE-2025-10754](https://cve.now/CVE-2025-10754.md): DocoDoco Store Locator \<= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload (CVSS 7.2, geolocationtechnology DocoDoco Store Locator) - [CVE-2025-40000](https://cve.now/CVE-2025-40000.md): wifi: rtw89: fix use-after-free in rtw89\_core\_tx\_kick\_off\_and\_wait() (CVSS 8.8, Linux) - [CVE-2025-39999](https://cve.now/CVE-2025-39999.md): blk-mq: fix blk\_mq\_tags double free while nr\_requests grown (no CVSS, Linux) - [CVE-2025-39998](https://cve.now/CVE-2025-39998.md): scsi: target: target\_core\_configfs: Add length check to avoid buffer overflow (CVSS 7.1, Linux) - [CVE-2025-39997](https://cve.now/CVE-2025-39997.md): ALSA: usb-audio: fix race condition to UAF in snd\_usbmidi\_free (no CVSS, Linux) - [CVE-2025-39996](https://cve.now/CVE-2025-39996.md): media: b2c2: Fix use-after-free causing by irq\_check\_work in flexcop\_pci\_remove (no CVSS, Linux) - [CVE-2025-39995](https://cve.now/CVE-2025-39995.md): media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe (no CVSS, Linux) - [CVE-2025-39994](https://cve.now/CVE-2025-39994.md): media: tuner: xc5000: Fix use-after-free in xc5000\_release (CVSS 7.3, Linux) - [CVE-2025-39993](https://cve.now/CVE-2025-39993.md): media: rc: fix races with imon\_disconnect() (CVSS 7.8, Linux) - [CVE-2025-39992](https://cve.now/CVE-2025-39992.md): mm: swap: check for stable address space before operating on the VMA (no CVSS, Linux) - [CVE-2025-39991](https://cve.now/CVE-2025-39991.md): wifi: ath11k: fix NULL dereference in ath11k\_qmi\_m3\_load() (no CVSS, Linux) - [CVE-2025-39990](https://cve.now/CVE-2025-39990.md): bpf: Check the helper function is valid in get\_helper\_proto (CVSS 7.8, Linux) - [CVE-2025-39988](https://cve.now/CVE-2025-39988.md): can: etas\_es58x: populate ndo\_change\_mtu() to prevent buffer overflow (CVSS 7.8, Linux) - [CVE-2025-39987](https://cve.now/CVE-2025-39987.md): can: hi311x: populate ndo\_change\_mtu() to prevent buffer overflow (CVSS 7.8, Linux) - [CVE-2025-39986](https://cve.now/CVE-2025-39986.md): can: sun4i\_can: populate ndo\_change\_mtu() to prevent buffer overflow (CVSS 7.8, Linux) - [CVE-2025-39985](https://cve.now/CVE-2025-39985.md): can: mcba\_usb: populate ndo\_change\_mtu() to prevent buffer overflow (CVSS 7.8, Linux) - [CVE-2025-39984](https://cve.now/CVE-2025-39984.md): net: tun: Update napi-\>skb after XDP process (no CVSS, Linux) - [CVE-2025-39983](https://cve.now/CVE-2025-39983.md): Bluetooth: hci\_event: Fix UAF in hci\_conn\_tx\_dequeue (CVSS 8.8, Linux) - [CVE-2025-39982](https://cve.now/CVE-2025-39982.md): Bluetooth: hci\_event: Fix UAF in hci\_acl\_create\_conn\_sync (CVSS 8.8, Linux) - [CVE-2025-39981](https://cve.now/CVE-2025-39981.md): Bluetooth: MGMT: Fix possible UAFs (CVSS 7.8, Linux) - [CVE-2025-39980](https://cve.now/CVE-2025-39980.md): nexthop: Forbid FDB status change while nexthop is in a group (no CVSS, Linux) - [CVE-2025-39979](https://cve.now/CVE-2025-39979.md): net/mlx5: fs, fix UAF in flow counter release (CVSS 7.8, Linux) - [CVE-2025-39978](https://cve.now/CVE-2025-39978.md): octeontx2-pf: Fix potential use after free in otx2\_tc\_add\_flow() (CVSS 7.8, Linux) - [CVE-2025-39977](https://cve.now/CVE-2025-39977.md): futex: Prevent use-after-free during requeue-PI (CVSS 7.8, Linux) - [CVE-2025-39976](https://cve.now/CVE-2025-39976.md): futex: Use correct exit on failure from futex\_hash\_allocate\_default() (CVSS 7.8, Linux) - [CVE-2025-39975](https://cve.now/CVE-2025-39975.md): smb: client: fix wrong index reference in smb2\_compound\_op() (CVSS 9.8, Linux) - [CVE-2025-39974](https://cve.now/CVE-2025-39974.md): tracing/osnoise: Fix slab-out-of-bounds in \_parse\_integer\_limit() (no CVSS, Linux) - [CVE-2025-39973](https://cve.now/CVE-2025-39973.md): i40e: add validation for ring\_len param (CVSS 8.8, Linux) - [CVE-2025-39972](https://cve.now/CVE-2025-39972.md): i40e: fix idx validation in i40e\_validate\_queue\_map (CVSS 8.8, Linux) - [CVE-2025-39971](https://cve.now/CVE-2025-39971.md): i40e: fix idx validation in config queues msg (CVSS 8.8, Linux) - [CVE-2025-39970](https://cve.now/CVE-2025-39970.md): i40e: fix input validation logic for action\_meta (CVSS 8.8, Linux) - [CVE-2025-39969](https://cve.now/CVE-2025-39969.md): i40e: fix validation of VF state in get resources (CVSS 8.8, Linux) - [CVE-2025-39968](https://cve.now/CVE-2025-39968.md): i40e: add max boundary check for VF filters (CVSS 7.3, Linux) - [CVE-2025-39967](https://cve.now/CVE-2025-39967.md): fbcon: fix integer overflow in fbcon\_do\_set\_font (CVSS 7.8, Linux) - [CVE-2025-39966](https://cve.now/CVE-2025-39966.md): iommufd: Fix race during abort for file descriptors (CVSS 7.8, Linux) - [CVE-2025-61941](https://cve.now/CVE-2025-61941.md): A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. (CVSS 7.2, BUFFALO WXR9300BE6P series) - [CVE-2025-11501](https://cve.now/CVE-2025-11501.md): Dynamically Display Posts \<= 1.1 - Unauthenticated SQL Injection (CVSS 7.5, markomaksym Dynamically Display Posts) - [CVE-2025-55039](https://cve.now/CVE-2025-55039.md): Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks (CVSS 6.5, Apache Software Foundation Apache Spark · pyspark +2) - [CVE-2025-11160](https://cve.now/CVE-2025-11160.md): WPBakery Page Builder \<= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module (CVSS 6.4, WPBakery Page Builder) - [CVE-2025-11161](https://cve.now/CVE-2025-11161.md): WPBakery Page Builder \<= 8.6.1 - Stored Cross-Site Scripting via vc\_custom\_heading Shortcode (CVSS 6.4, WPBakery Page Builder) - [CVE-2025-26861](https://cve.now/CVE-2025-26861.md): RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. (CVSS 7.8, RSUPPORT CO. RemoteCall Remote Support Program) - [CVE-2025-26860](https://cve.now/CVE-2025-26860.md): RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. (CVSS 7.8, RSUPPORT CO. RemoteCall Remote Support Program) - [CVE-2025-26859](https://cve.now/CVE-2025-26859.md): RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. (CVSS 7.8, RSUPPORT CO. RemoteView PC Application Console) - [CVE-2025-10406](https://cve.now/CVE-2025-10406.md): BlindMatrix e-Commerce \< 3.1 - Contributor+ LFI (CVSS 5.5, BlindMatrix e-Commerce) - [CVE-2025-31702](https://cve.now/CVE-2025-31702.md): A vulnerability exists in certain Dahua embedded products. (CVSS 6.8, Dahua IPC · Dahua SD) - [CVE-2025-55080](https://cve.now/CVE-2025-55080.md): Improper Parameter Check in ThreadX Syscall Implementation (CVSS 7.2, Eclipse Foundation ThreadX) - [CVE-2025-8561](https://cve.now/CVE-2025-8561.md): Ova Advent \<= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, ovatheme Ova Advent) - [CVE-2025-6042](https://cve.now/CVE-2025-6042.md): Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme \<= 1.4.0 - Unauthenticated Privilege Escalation to Editor (CVSS 7.3, Lisfinity Core - Lisfinity Core plugin used for pebas® Lisf…) - [CVE-2025-11176](https://cve.now/CVE-2025-11176.md): Quick Featured Images \<= 13.7.2 - Insecure Direct Object Reference to Image Manipulation (CVSS 4.3, kybernetikservices Quick Featured Images) - [CVE-2025-55079](https://cve.now/CVE-2025-55079.md): Missing check for thread priority (CVSS 5.7, Eclipse Foundation ThreadX) - [CVE-2025-11746](https://cve.now/CVE-2025-11746.md): XStore | Multipurpose WooCommerce Theme \<= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion (CVSS 8.8, 8theme XStore) - [CVE-2023-7305](https://cve.now/CVE-2023-7305.md): SmartBI RMIServlet Unrestricted File Upload RCE (CVSS 9.2, Guangzhou Smart Software Co. SmartBI) - [CVE-2011-10033](https://cve.now/CVE-2011-10033.md): WordPress Plugin is-human \<= v1.4.2 Eval Injection RCE (CVSS 9.3, is-human WordPress Plugin) - [CVE-2018-25117](https://cve.now/CVE-2018-25117.md): VestaCP Debian Installer Malicious Backdoor Supply Chain Compromise (CVSS 9.3, Vesta Control Panel) - [CVE-2017-20205](https://cve.now/CVE-2017-20205.md): Valve Source SDK Stack-Based Buffer Overflow RCE (CVSS 9.2, Valve Software Source SDK) - [CVE-2023-7304](https://cve.now/CVE-2023-7304.md): Ruijie RG-UAC nmc\_sync.php Command Injection (CVSS 9.3, Ruijie Networks Co. RG-UAC) - [CVE-2024-13991](https://cve.now/CVE-2024-13991.md): Huijietong Cloud Video Platform fileDownload Arbitrary File Read (CVSS 8.7, Huijietong Cloud Video Platform) - [CVE-2017-20204](https://cve.now/CVE-2017-20204.md): DBLTek GoIP Telnet Admin Interface Undocumented Backdoor (CVSS 9.3, DBL Technology (DBLTek) GoIP) - [CVE-2023-7311](https://cve.now/CVE-2023-7311.md): BYTEVALUE Intelligent Flow Control Router Command Injection (CVSS 9.3, BYTEVALUE (Luoyang Baiwei Intelligent Technology Co., Ltd.)…) - [CVE-2025-54268](https://cve.now/CVE-2025-54268.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Bridge) - [CVE-2025-54278](https://cve.now/CVE-2025-54278.md): Bridge | Heap-based Buffer Overflow (CWE-122) (CVSS 5.5, Adobe Bridge) - [CVE-2025-61804](https://cve.now/CVE-2025-61804.md): Animate | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Animate) - [CVE-2025-54279](https://cve.now/CVE-2025-54279.md): Animate | Use After Free (CWE-416) (CVSS 7.8, Adobe Animate) - [CVE-2025-54269](https://cve.now/CVE-2025-54269.md): Animate | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Animate) - [CVE-2025-54270](https://cve.now/CVE-2025-54270.md): Animate | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Animate) - [CVE-2025-56746](https://cve.now/CVE-2025-56746.md): Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation (CVSS 2.2) - [CVE-2025-56748](https://cve.now/CVE-2025-56748.md): Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limi (CVSS 6.4) - [CVE-2025-56749](https://cve.now/CVE-2025-56749.md): Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. (CVSS 9.4) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2025-10-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.