# CVEs published 2025-10-16

132 CVEs were published on October 16, 2025: 16 critical, 37 high. Days are UTC.

- [CVE-2025-11896](https://cve.now/CVE-2025-11896.md): Stack overflow in Xpdf 4.05 due to object loop in PDF CMap (CVSS 2.1, Xpdf)
- [CVE-2025-62504](https://cve.now/CVE-2025-62504.md): Envoy Lua filter use-after-free when oversized rewritten response body causes crash (CVSS 6.5, envoyproxy envoy)
- [CVE-2025-62506](https://cve.now/CVE-2025-62506.md): MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS (CVSS 8.1, minio · github.com/minio/minio)
- [CVE-2025-11864](https://cve.now/CVE-2025-11864.md): NucleoidAI Nucleoid Outbound Request cluster.ts extension.apply server-side request forgery (CVSS 6.9, NucleoidAI Nucleoid)
- [CVE-2024-42192](https://cve.now/CVE-2024-42192.md): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage (CVSS 5.5, HCL Software Traveler for Microsoft Outlook)
- [CVE-2025-11853](https://cve.now/CVE-2025-11853.md): Sismics Teedy API Endpoint file access control (CVSS 5.3, Sismics Teedy)
- [CVE-2025-11852](https://cve.now/CVE-2025-11852.md): Apeman ID71 ONVIF Service device\_service missing authentication (CVSS 6.9, Apeman ID71)
- [CVE-2025-11493](https://cve.now/CVE-2025-11493.md): Self-Update Verification Mechanism Process in ConnectWise Automate (CVSS 8.8, ConnectWise Automate)
- [CVE-2025-11492](https://cve.now/CVE-2025-11492.md): HTTP Configuration and Encryption in Transit (CVSS 9.6, ConnectWise Automate)
- [CVE-2025-62428](https://cve.now/CVE-2025-62428.md): Drawing-Captcha APP Host Header Injection in \`/register\` and \`/confirm-email\` Endpoints (CVSS 8.8, Drawing-Captcha-APP)
- [CVE-2025-34253](https://cve.now/CVE-2025-34253.md): D-Link Nuclias Connect \<= v1.3.1.4 Stored Cross-Site Scripting (XSS) (CVSS 5.1, D-Link Nuclias Connect)
- [CVE-2025-34255](https://cve.now/CVE-2025-34255.md): D-Link Nuclias Connect \<= v1.3.1.4 Forgot Password Account Enumeration (CVSS 6.9, D-Link Nuclias Connect)
- [CVE-2025-34254](https://cve.now/CVE-2025-34254.md): D-Link Nuclias Connect \<= v1.3.1.4 Login Account Enumeration (CVSS 6.9, D-Link Nuclias Connect)
- [CVE-2025-62427](https://cve.now/CVE-2025-62427.md): Server-Side Request Forgery (SSRF) in Angular SSR (CVSS 8.7, angular-cli · @angular/ssr)
- [CVE-2025-62425](https://cve.now/CVE-2025-62425.md): Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password (CVSS 8.3, element-hq matrix-authentication-service)
- [CVE-2025-62423](https://cve.now/CVE-2025-62423.md): ClipBucket V5 Blind SQL injection in the Admin Panel (CVSS 6.7, MacWarrior clipbucket-v5)
- [CVE-2025-62415](https://cve.now/CVE-2025-62415.md): bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (HTML) (CVSS 6.9, bagisto · bagisto/bagisto)
- [CVE-2025-62418](https://cve.now/CVE-2025-62418.md): bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG) (CVSS 6.9, bagisto · bagisto/bagisto)
- [CVE-2025-62414](https://cve.now/CVE-2025-62414.md): bagisto - Cross Site Scripting (XSS) in Create New Customer (CVSS 6.9, bagisto · bagisto/bagisto)
- [CVE-2025-62416](https://cve.now/CVE-2025-62416.md): bagisto - Server Side Template Injection (SSTI) in Product Description (CVSS 5.1, bagisto · bagisto/bagisto)
- [CVE-2025-62417](https://cve.now/CVE-2025-62417.md): bagisto - CSV Formula Injection in Create New Product (CVSS 7.1, bagisto · bagisto/bagisto)
- [CVE-2025-62413](https://cve.now/CVE-2025-62413.md): MQTTX vulnerable to cross-site scripting via improper message payload rendering (CVSS 6.1, emqx MQTTX)
- [CVE-2025-34517](https://cve.now/CVE-2025-34517.md): Ilevia EVE X1 Server 4.7.18.0.eden Absolute Path Traversal (CVSS 8.7, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34514](https://cve.now/CVE-2025-34514.md): Ilevia EVE X1 Server 4.7.18.0.eden Authenticated Command Injection (CVSS 8.7, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34519](https://cve.now/CVE-2025-34519.md): Ilevia EVE X1 Server 4.7.18.0.eden Insecure Hashing Algorithm (CVSS 8.2, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34512](https://cve.now/CVE-2025-34512.md): Ilevia EVE X1 Server 4.7.18.0.eden Reflected XSS (CVSS 5.1, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34518](https://cve.now/CVE-2025-34518.md): Ilevia EVE X1 Server 4.7.18.0.eden Relative Path Traversal (CVSS 8.7, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34515](https://cve.now/CVE-2025-34515.md): Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation (CVSS 9.3, Ilevia Srl. EVE X1 Server)
- [CVE-2025-62412](https://cve.now/CVE-2025-62412.md): LibreNMS alert-rules Cross-Site Scripting Vulnerability (CVSS 3.8, librenms · librenms/librenms)
- [CVE-2025-34513](https://cve.now/CVE-2025-34513.md): Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection (CVSS 9.3, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34516](https://cve.now/CVE-2025-34516.md): Ilevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials (CVSS 9.3, Ilevia Srl. EVE X1 Server)
- [CVE-2025-62411](https://cve.now/CVE-2025-62411.md): Stored XSS in Alert Transport name field in LibreNMS (CVSS 5.5, librenms · librenms/librenms)
- [CVE-2025-62409](https://cve.now/CVE-2025-62409.md): Envoy allows large requests and responses to cause TCP connection pool crash (CVSS 6.6, envoyproxy envoy)
- [CVE-2025-62407](https://cve.now/CVE-2025-62407.md): Frappe has an Open Redirect on Login Page (CVSS 6.1, frappe)
- [CVE-2025-61924](https://cve.now/CVE-2025-61924.md): PrestaShop Checkout Target PayPal merchant account hijacking from backoffice (CVSS 3.8, PrestaShopCorp ps\_checkout · prestashop/ps\_checkout)
- [CVE-2025-61923](https://cve.now/CVE-2025-61923.md): PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure (CVSS 4.1, PrestaShopCorp ps\_checkout · prestashop/ps\_checkout)
- [CVE-2025-61922](https://cve.now/CVE-2025-61922.md): PrestaShop Checkout allows customer account takeover via email (CVSS 9.1, PrestaShopCorp ps\_checkout · prestashop/ps\_checkout)
- [CVE-2025-61909](https://cve.now/CVE-2025-61909.md): Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user (CVSS 4.0, icinga2)
- [CVE-2025-62586](https://cve.now/CVE-2025-62586.md): OPEXUS FOIAXpress unauthenticated administrator password reset (CVSS 8.9, OPEXUS FOIAXpress)
- [CVE-2025-61908](https://cve.now/CVE-2025-61908.md): Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference (CVSS 7.1, icinga2)
- [CVE-2025-61907](https://cve.now/CVE-2025-61907.md): Icinga 2 API users could access restricted values in filter expressions (CVSS 7.1, icinga2)
- [CVE-2025-61789](https://cve.now/CVE-2025-61789.md): Icinga DB Web hidden/protected custom variables are prone to filter enumeration (CVSS 5.3, icingadb-web)
- [CVE-2025-36128](https://cve.now/CVE-2025-36128.md): IBM MQ denial of service (CVSS 7.5, IBM MQ)
- [CVE-2025-58051](https://cve.now/CVE-2025-58051.md): Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table (CVSS 6.5, nextcloud security-advisories)
- [CVE-2025-53092](https://cve.now/CVE-2025-53092.md): Strapi core vulnerable to sensitive data exposure via CORS misconfiguration (CVSS 6.5, strapi · @strapi/core)
- [CVE-2025-25298](https://cve.now/CVE-2025-25298.md): Missing Maximum Password Length Validation in Strapi Password Hashing (CVSS 6.3, strapi · @strapi/core)
- [CVE-2024-56143](https://cve.now/CVE-2024-56143.md): Strapi Allows Unauthorized Access to Private Fields via parms.lookup (CVSS 8.2, strapi · @strapi/core)
- [CVE-2025-11851](https://cve.now/CVE-2025-11851.md): Apeman ID71 set\_alias.cgi cross site scripting (CVSS 5.1, Apeman ID71)
- [CVE-2025-62496](https://cve.now/CVE-2025-62496.md): Integer overflow in js\_bigint\_from\_string in QuickJS (CVSS 7.1, QuickJS)
- [CVE-2025-62495](https://cve.now/CVE-2025-62495.md): Type confusion in string addition in QuickJS (CVSS 7.1, QuickJS)
- [CVE-2025-62494](https://cve.now/CVE-2025-62494.md): Type confusion in string addition in QuickJS (CVSS 7.1, QuickJS)
- [CVE-2025-62493](https://cve.now/CVE-2025-62493.md): Heap out-of-bounds read in js\_bigint\_to\_string1 in QuickJS (CVSS 5.9, QuickJS)
- [CVE-2025-62492](https://cve.now/CVE-2025-62492.md): Heap out-of-bounds read in js\_typed\_array\_indexOf in QuickJS (CVSS 5.9, QuickJS)
- [CVE-2025-62491](https://cve.now/CVE-2025-62491.md): Use-after-free in js\_std\_promise\_rejection\_check in QuickJS (CVSS 8.8, QuickJS)
- [CVE-2025-62490](https://cve.now/CVE-2025-62490.md): Use-after-free in js\_print\_object in QuickJS (CVSS 8.8, QuickJS)
- [CVE-2025-11842](https://cve.now/CVE-2025-11842.md): Shazwazza Smidge Bundle path traversal (CVSS 5.3, Shazwazza Smidge · Smidge)
- [CVE-2025-11840](https://cve.now/CVE-2025-11840.md): GNU Binutils ldmisc.c vfinfo out-of-bounds (CVSS 4.8, GNU Binutils)
- [CVE-2025-9559](https://cve.now/CVE-2025-9559.md): Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data (CVSS 6.5, Pegasystems Pega Infinity)
- [CVE-2025-55035](https://cve.now/CVE-2025-55035.md): Mattermost Desktop DoS when user has basic authentication server configured (CVSS 6.1, Mattermost)
- [CVE-2025-36002](https://cve.now/CVE-2025-36002.md): IBM Sterling B2B Integrator information disclosure (CVSS 5.5, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2025-41254](https://cve.now/CVE-2025-41254.md): Spring Framework STOMP CSRF Vulnerability (CVSS 4.3, VMware Spring Framework · org.springframework:spring-websoc…)
- [CVE-2025-41253](https://cve.now/CVE-2025-41253.md): Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables (CVSS 7.5, VMware Spring Cloud Gateway Server Webflux · org.springfram…)
- [CVE-2025-11839](https://cve.now/CVE-2025-11839.md): GNU Binutils prdbg.c tg\_tag\_type return value (CVSS 4.8, GNU Binutils)
- [CVE-2025-46752](https://cve.now/CVE-2025-46752.md): A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to inf (CVSS 4.2, Fortinet FortiDLP)
- [CVE-2025-53950](https://cve.now/CVE-2025-53950.md): An Exposure of Private Personal Information ('Privacy Violation') vulnerability \[CWE-359\] in Fortinet FortiDLP Agent's Outlookproxy plugin f (CVSS 5.1, Fortinet FortiDLP)
- [CVE-2025-53951](https://cve.now/CVE-2025-53951.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] in Fortinet FortiDLP Agent's Outloo (CVSS 4.9, Fortinet FortiDLP)
- [CVE-2025-54658](https://cve.now/CVE-2025-54658.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] in Fortinet FortiDLP Agent's Outloo (CVSS 7.2, Fortinet FortiDLP)
- [CVE-2025-9152](https://cve.now/CVE-2025-9152.md): Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpoint (CVSS 9.8, WSO2 API Manager · WSO2 API Control Plane)
- [CVE-2025-9804](https://cve.now/CVE-2025-9804.md): Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs (CVSS 9.6, WSO2 Identity Server as Key Manager · WSO2 Identity Ser… +17)
- [CVE-2025-9955](https://cve.now/CVE-2025-9955.md): Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration (CVSS 5.7, WSO2 Enterprise Integrator · WSO2 Enterprise Service Bus +2)
- [CVE-2025-10611](https://cve.now/CVE-2025-10611.md): Potential Broken Access Control in Multiple WSO2 Products via System REST APIs (CVSS 9.8, WSO2 API Manager · WSO2 API Control Plane +8)
- [CVE-2025-3930](https://cve.now/CVE-2025-3930.md): Lack of JWT Expiration after Log Out in Strapi (CVSS 6.3, Strapi · @strapi/strapi)
- [CVE-2025-58426](https://cve.now/CVE-2025-58426.md): desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applicatio (CVSS 4.3, NEOJAPAN desknet's NEO)
- [CVE-2025-58079](https://cve.now/CVE-2025-58079.md): Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious (CVSS 4.3, NEOJAPAN desknet's NEO)
- [CVE-2025-55072](https://cve.now/CVE-2025-55072.md): Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s we (CVSS 5.4, NEOJAPAN desknet's NEO)
- [CVE-2025-54859](https://cve.now/CVE-2025-54859.md): Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s we (CVSS 4.8, NEOJAPAN desknet's NEO)
- [CVE-2025-54760](https://cve.now/CVE-2025-54760.md): Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s we (CVSS 5.4, NEOJAPAN desknet's NEO)
- [CVE-2025-52583](https://cve.now/CVE-2025-52583.md): Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser. (CVSS 6.1, NEOJAPAN desknet's Web Server)
- [CVE-2025-24833](https://cve.now/CVE-2025-24833.md): Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a use (CVSS 5.4, NEOJAPAN desknet's NEO)
- [CVE-2025-6338](https://cve.now/CVE-2025-6338.md): Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend (CVSS 9.2, Qt)
- [CVE-2025-58115](https://cve.now/CVE-2025-58115.md): ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. (CVSS 6.1, NEOJAPAN ChatLuck)
- [CVE-2025-54461](https://cve.now/CVE-2025-54461.md): ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. (CVSS 5.3, NEOJAPAN ChatLuck)
- [CVE-2025-53858](https://cve.now/CVE-2025-53858.md): ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. (CVSS 5.4, NEOJAPAN ChatLuck)
- [CVE-2025-58073](https://cve.now/CVE-2025-58073.md): Arbitrary Mattermost Team can be joined by manipulating the OAuth state (CVSS 8.1, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2025-61581](https://cve.now/CVE-2025-61581.md): Apache Traffic Control: ReDoS issue in Traffic Router configuration (CVSS 7.5, Apache Software Foundation Apache Traffic Control · gith… +1)
- [CVE-2025-41410](https://cve.now/CVE-2025-41410.md): Slack import bypasses email verification for team access controls (CVSS 5.4, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-0277](https://cve.now/CVE-2025-0277.md): HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP) (CVSS 6.5, HCL Software BigFix Mobile)
- [CVE-2025-54539](https://cve.now/CVE-2025-54539.md): Apache ActiveMQ NMS AMQP Client: Deserialization of Untrusted Data (CVSS 9.8, Apache Software Foundation Apache ActiveMQ NMS AMQP Client…)
- [CVE-2025-0276](https://cve.now/CVE-2025-0276.md): HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP) (CVSS 6.5, HCL Software BigFix Modern Client Management)
- [CVE-2025-10545](https://cve.now/CVE-2025-10545.md): Guest user can add unauthorized team users to private channels (CVSS 3.1, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2025-58075](https://cve.now/CVE-2025-58075.md): Arbitrary Mattermost Team can be joined by manipulating the SAML RelayState (CVSS 8.1, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2025-54499](https://cve.now/CVE-2025-54499.md): Insecure string comparison enables timing attacks (CVSS 3.1, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2025-41443](https://cve.now/CVE-2025-41443.md): Guest user can discover active public channels (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +1)
- [CVE-2025-41021](https://cve.now/CVE-2025-41021.md): Stored Cross-Site Scripting (XSS) vulnerability in Sergestec's Exito (CVSS 5.1, Sergestec SISTICK)
- [CVE-2025-41020](https://cve.now/CVE-2025-41020.md): Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito (CVSS 7.1, Sergestec Exito)
- [CVE-2025-41019](https://cve.now/CVE-2025-41019.md): SQL injection vulnerability in Sergestec's Exito (CVSS 9.3, Sergestec SISTICK)
- [CVE-2025-55091](https://cve.now/CVE-2025-55091.md): Potential out of bound read in \_nx\_ip\_packet\_receive() (CVSS 6.9, Eclipse Foundation NetX Duo)
- [CVE-2025-41018](https://cve.now/CVE-2025-41018.md): SQL injection vulnerability in Sergestec's Exito (CVSS 9.3, Sergestec Exito)
- [CVE-2025-62585](https://cve.now/CVE-2025-62585.md): Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment. (CVSS 7.5, NAVER Whale browser)
- [CVE-2025-62584](https://cve.now/CVE-2025-62584.md): Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment. (CVSS 7.5, NAVER Whale browser)
- [CVE-2025-62583](https://cve.now/CVE-2025-62583.md): Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment. (CVSS 9.8, NAVER Whale browser)
- [CVE-2025-10849](https://cve.now/CVE-2025-10849.md): Felan Framework \<= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process\_plugin\_actions (CVSS 5.3, RiceTheme Felan Framework)
- [CVE-2025-10850](https://cve.now/CVE-2025-10850.md): Felan Framework \<= 1.1.4 - Hardcoded Credentials (CVSS 9.8, RiceTheme Felan Framework)
- [CVE-2025-10742](https://cve.now/CVE-2025-10742.md): Truelysell Core \<= 1.8.6 - Unauthenticated Arbitrary User Password Change (CVSS 9.8, dreamstechnologies Truelysell Core)
- [CVE-2025-10706](https://cve.now/CVE-2025-10706.md): Classified Pro \<= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation (CVSS 8.8, Cridio Studio ClassifiedPro - reCommerce WordPress Theme)
- [CVE-2025-55090](https://cve.now/CVE-2025-55090.md): Potential out of bound read issue in \_nx\_ipv4\_packet\_receive() in NetX Duo (CVSS 6.9, Eclipse Foundation NetX Duo)
- [CVE-2025-55089](https://cve.now/CVE-2025-55089.md): Eclipse ThreadX FileX RAM disk driver buffer overflow (CVSS 9.2, Eclipse Foundation FileX)
- [CVE-2025-55084](https://cve.now/CVE-2025-55084.md): Out of bound read in \_nx\_secure\_tls\_proc\_clienthello\_supported\_versions\_extension() (CVSS 6.9, Eclipse Foundation NetX Duo)
- [CVE-2025-58778](https://cve.now/CVE-2025-58778.md): Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. (CVSS 7.2, Ruijie Networks Co. RG-EST300)
- [CVE-2025-0275](https://cve.now/CVE-2025-0275.md): HCL BigFix Mobile 3.3 and earlier is affected by improper access control (CVSS 5.3, HCL Software BigFix Mobile)
- [CVE-2025-0274](https://cve.now/CVE-2025-0274.md): HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control (CVSS 5.3, HCL Software BigFix Modern Client Management)
- [CVE-2025-11814](https://cve.now/CVE-2025-11814.md): Ultimate Addons for WPBakery Page Builder \< 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Brainstorm Force Ultimate Addons for WPBakery)
- [CVE-2025-10700](https://cve.now/CVE-2025-10700.md): Ally - Web Accessibility & Usability \<= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, elemntor Ally – Web Accessibility & Usability)
- [CVE-2025-62580](https://cve.now/CVE-2025-62580.md): ASDA-Soft Stack-based Buffer Overflow Vulnerability (CVSS 7.8, Delta Electronics ASDA-Soft)
- [CVE-2025-62579](https://cve.now/CVE-2025-62579.md): ASDA-Soft Stack-based Buffer Overflow Vulnerability (CVSS 7.8, Delta Electronics ASDA-Soft)
- [CVE-2025-11683](https://cve.now/CVE-2025-11683.md): YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure (CVSS 6.5, TODDR YAML::Syck)
- [CVE-2025-22381](https://cve.now/CVE-2025-22381.md): Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to reset a user's password. (CVSS 8.2)
- [CVE-2025-56699](https://cve.now/CVE-2025-56699.md): SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated (CVSS 5.4)
- [CVE-2025-56700](https://cve.now/CVE-2025-56700.md): Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level privi (CVSS 5.4)
- [CVE-2025-60358](https://cve.now/CVE-2025-60358.md): radare2 v.5.9.8 and before contains a memory leak in the function \_load\_relocations. (CVSS 5.5)
- [CVE-2025-60639](https://cve.now/CVE-2025-60639.md): Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26). (CVSS 6.5)
- [CVE-2025-60641](https://cve.now/CVE-2025-60641.md): The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to unserialize(base64\_decode($\_POST\['mexcel'\])), where $\_POST\[ (CVSS 6.5)
- [CVE-2025-60855](https://cve.now/CVE-2025-60855.md): Reolink Video Doorbell WiFi DB\_566128M5MP\_W performs insufficient validation of firmware update signatures. (CVSS 5.1)
- [CVE-2025-61330](https://cve.now/CVE-2025-61330.md): A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. (CVSS 6.5)
- [CVE-2025-61514](https://cve.now/CVE-2025-61514.md): An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploadin (CVSS 6.5)
- [CVE-2025-61536](https://cve.now/CVE-2025-61536.md): FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset (magic) links using the untrusted \`req.headers.host\` header and forces the (CVSS 8.2)
- [CVE-2025-61539](https://cve.now/CVE-2025-61539.md): Cross site scripting (XSS) vulnerability in Ultimate PHP Board 2.2.7 via the u\_name parameter in lostpassword.php. (CVSS 6.1)
- [CVE-2025-61540](https://cve.now/CVE-2025-61540.md): SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php. (CVSS 6.5)
- [CVE-2025-61541](https://cve.now/CVE-2025-61541.md): Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot\_send.cgi). (CVSS 7.1)
- [CVE-2025-61543](https://cve.now/CVE-2025-61543.md): A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. (CVSS 7.1)
- [CVE-2025-61553](https://cve.now/CVE-2025-61553.md): An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows l (CVSS 8.2)
- [CVE-2025-61554](https://cve.now/CVE-2025-61554.md): A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local a (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.