CVEs published October 19, 2025
11 CVEs were published on October 19, 2025: 0 critical, 1 high.
- Published
- 11
- Critical
- 0
- High
- 1
- Medium
- 9
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- 70mai X200
- 2
- ChurchCRM
- 2
- bftpd
- 1
- boyns rplay
- 1
- e107 CMS
- 1
- givanz Vvveb
- 1
- LibreWolf
- 1
- LogicalDOC Community Edition
- 1
- toeverything AFFiNE
- 1
High 1
Medium, low and unrated 10
- CVE-2025-11947bftpd Configuration File options.c expand_groups heap-based overflowbftpd
- CVE-2025-11946LogicalDOC Community Edition Add Contact frontend.jsp cross site scriptingLogicalDOC Community Edition
- CVE-2025-11945toeverything AFFiNE Avatar Upload Image Endpoint cross site scriptingtoeverything AFFiNE
- CVE-2025-11944givanz Vvveb Raw SQL import.php import sql injectiongivanz Vvveb
- CVE-2025-1194370mai X200 HTTP Web Server default credentials70mai X200
- CVE-2025-1194270mai X200 Pairing missing authentication70mai X200
- CVE-2025-11941e107 CMS Avatar image.php path traversale107 CMS
- CVE-2025-11939ChurchCRM Backup Restore RestoreJob.php path traversalChurchCRM
- CVE-2025-11938ChurchCRM setup.php deserializationChurchCRM
- CVE-2025-62672rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact.boyns rplay