CVEs published October 20, 2025
79 CVEs were published on October 20, 2025: 11 critical, 25 high. 1 is now in CISA KEV.
- Published
- 79
- Critical
- 11
- High
- 25
- Medium
- 28
- Low
- 4
- Unrated
- 11
- Now in CISA KEV
- 1
- Fix available
- 26
Most affected products
- Linux
- 13
- opentext Flipper
- 5
- Microchip Time Provider
- 3
- warmcat libwebsockets
- 3
- error311 FileRise
- 2
- Honor MagicOS
- 2
- remram44 taguette · taguette
- 2
- ABB ALS-mini-s4 IP · ABB ALS-mini-s8 IP
- 1
- ABB CoreSense™ HM · ABB CoreSense™ M10
- 1
- ABB Terra AC wallbox
- 1
Critical 11
- CVE-2025-12001Incorrect Content-Type HeaderAzure Access Technology BLU-IC2 · Azure Access Technology B…
- CVE-2018-25118GeoVision Command Injection RCE via /PictureCatch.cgiGeoVision GV-BX1500 · GeoVision GV-MFD1501 +1
- CVE-2025-9574Missing Authentication VulnerabilityABB ALS-mini-s4 IP · ABB ALS-mini-s8 IP
- CVE-2025-10678Admin with default credentials in NetBird VPNNetBird VPN NetBird · github.com/netbirdio/netbird
- CVE-2025-41028SQL injection in Epsilon RHGrupo Castilla Epsilon RH
- CVE-2025-31342Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous TypeGalaxy Software Services Vitals ESP
- CVE-2025-61932Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, MOTEX Lanscope Endpoint Manager (On-Premises) (Client progr…
- CVE-2025-11948Excellent Infotek｜Document Management System - Arbitrary File UploadExcellent Infotek Document Management System
- CVE-2025-54957An issue was discovered in Dolby UDC 4.5 through 4.13.
- CVE-2025-61303Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows beha
- CVE-2025-61455SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint.
High 25
- CVE-2025-62658SQL injection in WatchAnalytics through Special:ClearPendingReviewsThe Wikimedia Foundation MediaWiki WatchAnalytics extension
- CVE-2025-62527Taguette vulnerable to password reset link poisoningremram44 taguette · taguette
- CVE-2025-62697Improperly sanitized style parameter in LanguageSelectorThe Wikimedia Foundation Mediawiki - LanguageSelector Exten…
- CVE-2025-47902SQL Injection in web resourceMicrochip Time Provider
- CVE-2025-3465Path Traversal VulnerabilityABB CoreSense™ HM · ABB CoreSense™ M10
- CVE-2025-47901RCE on restore configuration passwordMicrochip Time Provider
- CVE-2025-47900RCE on backup configuration passwordMicrochip Time Provider
- CVE-2025-62510FileRise insecure folder visibility via name-based mapping and incomplete ACL checkserror311 FileRise
- CVE-2025-62509FileRise improper ownership/permission validation allowed cross-tenant file operationserror311 FileRise
- CVE-2025-62429ClipBucket v5 executes arbitrary PHP codeMacWarrior clipbucket-v5
- CVE-2025-40012net/smc: fix warning in smc_rx_splice() when calling get_page()Linux
- CVE-2025-40006mm/hugetlb: fix folio is still mapped when deletedLinux
- CVE-2025-57738Apache Syncope: Remote Code Execution by delegated administratorsApache Software Foundation Apache Syncope · org.apache.sync…
- CVE-2025-41390An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co.Truffle Security TruffleHog
- CVE-2025-11678Stack-based Buffer Overflow in libwebsockets DNS response parsingwarmcat libwebsocket
- CVE-2025-62577ETERNUS SF provided by Fsas Technologies Inc.Fsas Technologies ETERNUS SF AdvancedCopy Manager Standa… +3
- CVE-2024-55568An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380,
- CVE-2025-26781An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330,
- CVE-2025-26782An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330,
- CVE-2025-56219Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting.
- CVE-2025-56223A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS)
- CVE-2025-56224A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification vi
- CVE-2025-61301Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can subm
- CVE-2025-61417Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component.tastyigniter/tastyigniter
- CVE-2025-61488An issue in Senayan Library Management System (SLiMS) 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrap_imag
Medium, low and unrated 43
- CVE-2025-11536Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgerybdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2025-62657Stored XSS through system messages in PageFormsThe Wikimedia Foundation MediaWiki PageForms extension
- CVE-2025-62656GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSSThe Wikimedia Foundation MediaWiki GlobalBlocking extension
- CVE-2025-62528Taguette cross-site scripting vulnerability via tag name, tag description, document name and document descriptionremram44 taguette · taguette
- CVE-2025-8052HQL Injection vulnerability has been discovered in Opentext Flipper.opentext Flipper
- CVE-2025-62522vite allows server.fs.deny bypass via backslash on Windowsvitejs vite · vite
- CVE-2025-8048External Control of File path vulnerability has been discovered on Openext Flipper.opentext Flipper
- CVE-2025-8049Insufficient Access Control vulnerability has been discovered in OpenText Flipper.opentext Flipper
- CVE-2025-8051Path traversal validation vulnerability has been discovered in opentext Flipper.opentext Flipper
- CVE-2025-8053Insufficient access control vulnerability has been discovered in Opentext Flipper.opentext Flipper
- CVE-2025-5517Heap Memory Corruption VulnerabilityABB Terra AC wallbox
- CVE-2025-62698Stored XSS through system messages in ExternalGuidanceThe Wikimedia Foundation Mediawiki - ExternalGuidance
- CVE-2025-62700Stored XSS through a system message in MultiBoilerplateThe Wikimedia Foundation Mediawiki - MultiBoilerplate Exten…
- CVE-2025-62693Stored XSS through system messages in LastModifiedThe Wikimedia Foundation Mediawiki - LastModified Extension
- CVE-2025-55086In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked indEclipse Foundation NextX Duo
- CVE-2025-11979Use-after-free in the MongoDB server query planner may lead to crash or undefined behaviorMongoDB Server
- CVE-2025-6515Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackersoatpp-mcp
- CVE-2025-40017media: iris: Fix memory leak by freeing untracked persist bufferLinux
- CVE-2025-40016media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_IDLinux
- CVE-2025-40015media: stm32-csi: Fix dereference before NULL checkLinux
- CVE-2025-40013ASoC: qcom: audioreach: fix potential null pointer dereferenceLinux
- CVE-2025-40011drm/gma500: Fix null dereference in hdmi teardownLinux
- CVE-2025-40010afs: Fix potential null pointer dereference in afs_put_serverLinux
- CVE-2025-40009fs/proc/task_mmu: check p->vec_buf for NULLLinux
- CVE-2025-40008kmsan: fix out-of-bounds access to shadow memoryLinux
- CVE-2025-40007netfs: fix reference leakLinux
- CVE-2025-40005spi: cadence-quadspi: Implement refcount to handle unbind during busyLinux
- CVE-2025-8884IDOR in VHS Electronic Software's ACE CenterVHS Electronic Software Ltd. ACE Center
- CVE-2025-11680Out-of-bounds Write in libwebsockets PNG parsingwarmcat libwebsockets
- CVE-2025-11679Out-of-bounds Read in libwebsockets PNG parsingwarmcat libwebsockets
- CVE-2025-11677Use After Free in libwebsockets WebSocket serverwarmcat libwebsockets
- CVE-2025-8349Cross-Site Scripting (XSS) stored in Tawk Live ChatTawk Live Chat
- CVE-2025-57837Tileservice module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentHonor FCP-AN10
- CVE-2025-57839Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentialityHonor MagicOS
- CVE-2025-57838Some Honor products are affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confideHonor MagicOS
- CVE-2025-40004net/9p: Fix buffer overflow in USB transport layerLinux
- CVE-2025-48025In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an imprope
- CVE-2025-54764Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gc
- CVE-2025-60781PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter.
- CVE-2025-60783There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php.
- CVE-2025-60856Reolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured UART/serial console.
- CVE-2025-61454A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint.
- CVE-2025-61456A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint.