CVEs published October 16, 2025
132 CVEs were published on October 16, 2025: 16 critical, 37 high.
- Published
- 132
- Critical
- 16
- High
- 37
- Medium
- 74
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 58
Most affected products
- Ilevia Srl. EVE X1 Server
- 8
- QuickJS
- 7
- NEOJAPAN desknet's NEO
- 6
- bagisto · bagisto/bagisto
- 5
- Fortinet FortiDLP
- 4
- Mattermost · github.com/mattermost/mattermost/server/v8 +3
- 4
- D-Link Nuclias Connect
- 3
- Eclipse Foundation NetX Duo
- 3
- icinga2
- 3
- NAVER Whale browser
- 3
Critical 16
- CVE-2025-11492HTTP Configuration and Encryption in TransitConnectWise Automate
- CVE-2025-34515Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege EscalationIlevia Srl. EVE X1 Server
- CVE-2025-34513Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command InjectionIlevia Srl. EVE X1 Server
- CVE-2025-34516Ilevia EVE X1 Server 4.7.18.0.eden Use of Default CredentialsIlevia Srl. EVE X1 Server
- CVE-2025-61922PrestaShop Checkout allows customer account takeover via emailPrestaShopCorp ps_checkout · prestashop/ps_checkout
- CVE-2025-9152Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR EndpointWSO2 API Manager · WSO2 API Control Plane
- CVE-2025-9804Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIsWSO2 Identity Server as Key Manager · WSO2 Identity Ser… +17
- CVE-2025-10611Potential Broken Access Control in Multiple WSO2 Products via System REST APIsWSO2 API Manager · WSO2 API Control Plane +8
- CVE-2025-6338Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backendQt
- CVE-2025-54539Apache ActiveMQ NMS AMQP Client: Deserialization of Untrusted DataApache Software Foundation Apache ActiveMQ NMS AMQP Client…
- CVE-2025-41019SQL injection vulnerability in Sergestec's ExitoSergestec SISTICK
- CVE-2025-41018SQL injection vulnerability in Sergestec's ExitoSergestec Exito
- CVE-2025-62583Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.NAVER Whale browser
- CVE-2025-10850Felan Framework <= 1.1.4 - Hardcoded CredentialsRiceTheme Felan Framework
- CVE-2025-10742Truelysell Core <= 1.8.6 - Unauthenticated Arbitrary User Password Changedreamstechnologies Truelysell Core
- CVE-2025-55089Eclipse ThreadX FileX RAM disk driver buffer overflowEclipse Foundation FileX
High 37
- CVE-2025-62506MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STSminio · github.com/minio/minio
- CVE-2025-11493Self-Update Verification Mechanism Process in ConnectWise AutomateConnectWise Automate
- CVE-2025-62428Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` EndpointsDrawing-Captcha-APP
- CVE-2025-62427Server-Side Request Forgery (SSRF) in Angular SSRangular-cli · @angular/ssr
- CVE-2025-62425Matrix Authentication Service account password can be changed using an authenticated session without supplying the current passwordelement-hq matrix-authentication-service
- CVE-2025-62417bagisto - CSV Formula Injection in Create New Productbagisto · bagisto/bagisto
- CVE-2025-34517Ilevia EVE X1 Server 4.7.18.0.eden Absolute Path TraversalIlevia Srl. EVE X1 Server
- CVE-2025-34514Ilevia EVE X1 Server 4.7.18.0.eden Authenticated Command InjectionIlevia Srl. EVE X1 Server
- CVE-2025-34519Ilevia EVE X1 Server 4.7.18.0.eden Insecure Hashing AlgorithmIlevia Srl. EVE X1 Server
- CVE-2025-34518Ilevia EVE X1 Server 4.7.18.0.eden Relative Path TraversalIlevia Srl. EVE X1 Server
- CVE-2025-62586OPEXUS FOIAXpress unauthenticated administrator password resetOPEXUS FOIAXpress
- CVE-2025-61908Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Referenceicinga2
- CVE-2025-61907Icinga 2 API users could access restricted values in filter expressionsicinga2
- CVE-2025-36128IBM MQ denial of serviceIBM MQ
- CVE-2024-56143Strapi Allows Unauthorized Access to Private Fields via parms.lookupstrapi · @strapi/core
- CVE-2025-62496Integer overflow in js_bigint_from_string in QuickJSQuickJS
- CVE-2025-62495Type confusion in string addition in QuickJSQuickJS
- CVE-2025-62494Type confusion in string addition in QuickJSQuickJS
- CVE-2025-62491Use-after-free in js_std_promise_rejection_check in QuickJSQuickJS
- CVE-2025-62490Use-after-free in js_print_object in QuickJSQuickJS
- CVE-2025-41253Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment VariablesVMware Spring Cloud Gateway Server Webflux · org.springfram…
- CVE-2025-54658An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's OutlooFortinet FortiDLP
- CVE-2025-58073Arbitrary Mattermost Team can be joined by manipulating the OAuth stateMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-61581Apache Traffic Control: ReDoS issue in Traffic Router configurationApache Software Foundation Apache Traffic Control · gith… +1
- CVE-2025-58075Arbitrary Mattermost Team can be joined by manipulating the SAML RelayStateMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-41020Insecure direct object reference (IDOR) vulnerability in Sergestec's ExitoSergestec Exito
- CVE-2025-62585Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.NAVER Whale browser
- CVE-2025-62584Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.NAVER Whale browser
- CVE-2025-10706Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationCridio Studio ClassifiedPro - reCommerce WordPress Theme
- CVE-2025-58778Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality.Ruijie Networks Co. RG-EST300
- CVE-2025-62580ASDA-Soft Stack-based Buffer Overflow VulnerabilityDelta Electronics ASDA-Soft
- CVE-2025-62579ASDA-Soft Stack-based Buffer Overflow VulnerabilityDelta Electronics ASDA-Soft
- CVE-2025-22381Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to reset a user's password.
- CVE-2025-61536FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset (magic) links using the untrusted `req.headers.host` header and forces the
- CVE-2025-61541Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi).
- CVE-2025-61543A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2.
- CVE-2025-61553An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows l
Medium, low and unrated 79
- CVE-2025-11896Stack overflow in Xpdf 4.05 due to object loop in PDF CMapXpdf
- CVE-2025-62504Envoy Lua filter use-after-free when oversized rewritten response body causes crashenvoyproxy envoy
- CVE-2025-11864NucleoidAI Nucleoid Outbound Request cluster.ts extension.apply server-side request forgeryNucleoidAI Nucleoid
- CVE-2024-42192HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakageHCL Software Traveler for Microsoft Outlook
- CVE-2025-11853Sismics Teedy API Endpoint file access controlSismics Teedy
- CVE-2025-11852Apeman ID71 ONVIF Service device_service missing authenticationApeman ID71
- CVE-2025-34253D-Link Nuclias Connect <= v1.3.1.4 Stored Cross-Site Scripting (XSS)D-Link Nuclias Connect
- CVE-2025-34255D-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account EnumerationD-Link Nuclias Connect
- CVE-2025-34254D-Link Nuclias Connect <= v1.3.1.4 Login Account EnumerationD-Link Nuclias Connect
- CVE-2025-62423ClipBucket V5 Blind SQL injection in the Admin PanelMacWarrior clipbucket-v5
- CVE-2025-62415bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (HTML)bagisto · bagisto/bagisto
- CVE-2025-62418bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)bagisto · bagisto/bagisto
- CVE-2025-62414bagisto - Cross Site Scripting (XSS) in Create New Customerbagisto · bagisto/bagisto
- CVE-2025-62416bagisto - Server Side Template Injection (SSTI) in Product Descriptionbagisto · bagisto/bagisto
- CVE-2025-62413MQTTX vulnerable to cross-site scripting via improper message payload renderingemqx MQTTX
- CVE-2025-34512Ilevia EVE X1 Server 4.7.18.0.eden Reflected XSSIlevia Srl. EVE X1 Server
- CVE-2025-62412LibreNMS alert-rules Cross-Site Scripting Vulnerabilitylibrenms · librenms/librenms
- CVE-2025-62411Stored XSS in Alert Transport name field in LibreNMSlibrenms · librenms/librenms
- CVE-2025-62409Envoy allows large requests and responses to cause TCP connection pool crashenvoyproxy envoy
- CVE-2025-62407Frappe has an Open Redirect on Login Pagefrappe
- CVE-2025-61924PrestaShop Checkout Target PayPal merchant account hijacking from backofficePrestaShopCorp ps_checkout · prestashop/ps_checkout
- CVE-2025-61923PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosurePrestaShopCorp ps_checkout · prestashop/ps_checkout
- CVE-2025-61909Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon usericinga2
- CVE-2025-61789Icinga DB Web hidden/protected custom variables are prone to filter enumerationicingadb-web
- CVE-2025-58051Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a tablenextcloud security-advisories
- CVE-2025-53092Strapi core vulnerable to sensitive data exposure via CORS misconfigurationstrapi · @strapi/core
- CVE-2025-25298Missing Maximum Password Length Validation in Strapi Password Hashingstrapi · @strapi/core
- CVE-2025-11851Apeman ID71 set_alias.cgi cross site scriptingApeman ID71
- CVE-2025-62493Heap out-of-bounds read in js_bigint_to_string1 in QuickJSQuickJS
- CVE-2025-62492Heap out-of-bounds read in js_typed_array_indexOf in QuickJSQuickJS
- CVE-2025-11842Shazwazza Smidge Bundle path traversalShazwazza Smidge · Smidge
- CVE-2025-11840GNU Binutils ldmisc.c vfinfo out-of-boundsGNU Binutils
- CVE-2025-9559Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read dataPegasystems Pega Infinity
- CVE-2025-55035Mattermost Desktop DoS when user has basic authentication server configuredMattermost
- CVE-2025-36002IBM Sterling B2B Integrator information disclosureIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-41254Spring Framework STOMP CSRF VulnerabilityVMware Spring Framework · org.springframework:spring-websoc…
- CVE-2025-11839GNU Binutils prdbg.c tg_tag_type return valueGNU Binutils
- CVE-2025-46752A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to infFortinet FortiDLP
- CVE-2025-53950An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin fFortinet FortiDLP
- CVE-2025-53951An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's OutlooFortinet FortiDLP
- CVE-2025-9955Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store ConfigurationWSO2 Enterprise Integrator · WSO2 Enterprise Service Bus +2
- CVE-2025-3930Lack of JWT Expiration after Log Out in StrapiStrapi · @strapi/strapi
- CVE-2025-58426desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applicatioNEOJAPAN desknet's NEO
- CVE-2025-58079Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create maliciousNEOJAPAN desknet's NEO
- CVE-2025-55072Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s weNEOJAPAN desknet's NEO
- CVE-2025-54859Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s weNEOJAPAN desknet's NEO
- CVE-2025-54760Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s weNEOJAPAN desknet's NEO
- CVE-2025-52583Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser.NEOJAPAN desknet's Web Server
- CVE-2025-24833Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a useNEOJAPAN desknet's NEO
- CVE-2025-58115ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up.NEOJAPAN ChatLuck
- CVE-2025-54461ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users.NEOJAPAN ChatLuck
- CVE-2025-53858ChatLuck contains a cross-site scripting vulnerability in Chat Rooms.NEOJAPAN ChatLuck
- CVE-2025-41410Slack import bypasses email verification for team access controlsMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-0277HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)HCL Software BigFix Mobile
- CVE-2025-0276HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)HCL Software BigFix Modern Client Management
- CVE-2025-10545Guest user can add unauthorized team users to private channelsMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-54499Insecure string comparison enables timing attacksMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-41443Guest user can discover active public channelsMattermost · github.com/mattermost/mattermost-server +1
- CVE-2025-41021Stored Cross-Site Scripting (XSS) vulnerability in Sergestec's ExitoSergestec SISTICK
- CVE-2025-55091Potential out of bound read in _nx_ip_packet_receive()Eclipse Foundation NetX Duo
- CVE-2025-10849Felan Framework <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actionsRiceTheme Felan Framework
- CVE-2025-55090Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX DuoEclipse Foundation NetX Duo
- CVE-2025-55084Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension()Eclipse Foundation NetX Duo
- CVE-2025-0275HCL BigFix Mobile 3.3 and earlier is affected by improper access controlHCL Software BigFix Mobile
- CVE-2025-0274HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access controlHCL Software BigFix Modern Client Management
- CVE-2025-11814Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingBrainstorm Force Ultimate Addons for WPBakery
- CVE-2025-10700Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Updateelemntor Ally – Web Accessibility & Usability
- CVE-2025-11683YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information DisclosureTODDR YAML::Syck
- CVE-2025-56699SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated
- CVE-2025-56700Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level privi
- CVE-2025-60358radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.
- CVE-2025-60639Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26).
- CVE-2025-60641The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to unserialize(base64_decode($_POST['mexcel'])), where $_POST[
- CVE-2025-60855Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures.
- CVE-2025-61330A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C.
- CVE-2025-61514An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploadin
- CVE-2025-61539Cross site scripting (XSS) vulnerability in Ultimate PHP Board 2.2.7 via the u_name parameter in lostpassword.php.
- CVE-2025-61540SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php.
- CVE-2025-61554A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local a