# CVEs published 2025-10-20

79 CVEs were published on October 20, 2025: 11 critical, 25 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-12001](https://cve.now/CVE-2025-12001.md): Incorrect Content-Type Header (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-11536](https://cve.now/CVE-2025-11536.md): Element Pack Addons for Elementor \<= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery (CVSS 5.0, bdthemes Element Pack – Widgets, Templates & Addons for Ele…)
- [CVE-2018-25118](https://cve.now/CVE-2018-25118.md): GeoVision Command Injection RCE via /PictureCatch.cgi (CVSS 10.0, GeoVision GV-BX1500 · GeoVision GV-MFD1501 +1)
- [CVE-2025-62658](https://cve.now/CVE-2025-62658.md): SQL injection in WatchAnalytics through Special:ClearPendingReviews (CVSS 7.5, The Wikimedia Foundation MediaWiki WatchAnalytics extension)
- [CVE-2025-62657](https://cve.now/CVE-2025-62657.md): Stored XSS through system messages in PageForms (CVSS 5.8, The Wikimedia Foundation MediaWiki PageForms extension)
- [CVE-2025-62656](https://cve.now/CVE-2025-62656.md): GlobalBlocking Special:GlobalBlockList vulnerable to message key stored XSS (CVSS 5.8, The Wikimedia Foundation MediaWiki GlobalBlocking extension)
- [CVE-2025-62528](https://cve.now/CVE-2025-62528.md): Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description (CVSS 5.4, remram44 taguette · taguette)
- [CVE-2025-62527](https://cve.now/CVE-2025-62527.md): Taguette vulnerable to password reset link poisoning (CVSS 7.1, remram44 taguette · taguette)
- [CVE-2025-8052](https://cve.now/CVE-2025-8052.md): HQL Injection vulnerability has been discovered in Opentext Flipper. (CVSS 1.0, opentext Flipper)
- [CVE-2025-62522](https://cve.now/CVE-2025-62522.md): vite allows server.fs.deny bypass via backslash on Windows (CVSS 6.0, vitejs vite · vite)
- [CVE-2025-8048](https://cve.now/CVE-2025-8048.md): External Control of File path vulnerability has been discovered on Openext Flipper. (CVSS 5.3, opentext Flipper)
- [CVE-2025-8049](https://cve.now/CVE-2025-8049.md): Insufficient Access Control vulnerability has been discovered in OpenText Flipper. (CVSS 2.3, opentext Flipper)
- [CVE-2025-8051](https://cve.now/CVE-2025-8051.md): Path traversal validation vulnerability has been discovered in opentext Flipper. (CVSS 5.3, opentext Flipper)
- [CVE-2025-8053](https://cve.now/CVE-2025-8053.md): Insufficient access control vulnerability has been discovered in Opentext Flipper. (CVSS 1.0, opentext Flipper)
- [CVE-2025-62697](https://cve.now/CVE-2025-62697.md): Improperly sanitized style parameter in LanguageSelector (CVSS 8.8, The Wikimedia Foundation Mediawiki - LanguageSelector Exten…)
- [CVE-2025-5517](https://cve.now/CVE-2025-5517.md): Heap Memory Corruption Vulnerability (CVSS 6.1, ABB Terra AC wallbox)
- [CVE-2025-62698](https://cve.now/CVE-2025-62698.md): Stored XSS through system messages in ExternalGuidance (CVSS 6.9, The Wikimedia Foundation Mediawiki - ExternalGuidance)
- [CVE-2025-62700](https://cve.now/CVE-2025-62700.md): Stored XSS through a system message in MultiBoilerplate (CVSS 6.9, The Wikimedia Foundation Mediawiki - MultiBoilerplate Exten…)
- [CVE-2025-47902](https://cve.now/CVE-2025-47902.md): SQL Injection in web resource (CVSS 7.1, Microchip Time Provider)
- [CVE-2025-3465](https://cve.now/CVE-2025-3465.md): Path Traversal Vulnerability (CVSS 8.2, ABB CoreSense™ HM · ABB CoreSense™ M10)
- [CVE-2025-62693](https://cve.now/CVE-2025-62693.md): Stored XSS through system messages in LastModified (CVSS 6.9, The Wikimedia Foundation Mediawiki - LastModified Extension)
- [CVE-2025-55086](https://cve.now/CVE-2025-55086.md): In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked ind (CVSS 6.3, Eclipse Foundation NextX Duo)
- [CVE-2025-47901](https://cve.now/CVE-2025-47901.md): RCE on restore configuration password (CVSS 8.9, Microchip Time Provider)
- [CVE-2025-11979](https://cve.now/CVE-2025-11979.md): Use-after-free in the MongoDB server query planner may lead to crash or undefined behavior (CVSS 5.3, MongoDB Server)
- [CVE-2025-47900](https://cve.now/CVE-2025-47900.md): RCE on backup configuration password (CVSS 8.9, Microchip Time Provider)
- [CVE-2025-62510](https://cve.now/CVE-2025-62510.md): FileRise insecure folder visibility via name-based mapping and incomplete ACL checks (CVSS 8.1, error311 FileRise)
- [CVE-2025-62509](https://cve.now/CVE-2025-62509.md): FileRise improper ownership/permission validation allowed cross-tenant file operations (CVSS 8.1, error311 FileRise)
- [CVE-2025-9574](https://cve.now/CVE-2025-9574.md): Missing Authentication Vulnerability (CVSS 9.9, ABB ALS-mini-s4 IP · ABB ALS-mini-s8 IP)
- [CVE-2025-6515](https://cve.now/CVE-2025-6515.md): Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers (CVSS 6.8, oatpp-mcp)
- [CVE-2025-62429](https://cve.now/CVE-2025-62429.md): ClipBucket v5 executes arbitrary PHP code (CVSS 7.2, MacWarrior clipbucket-v5)
- [CVE-2025-10678](https://cve.now/CVE-2025-10678.md): Admin with default credentials in NetBird VPN (CVSS 9.3, NetBird VPN NetBird · github.com/netbirdio/netbird)
- [CVE-2025-40017](https://cve.now/CVE-2025-40017.md): media: iris: Fix memory leak by freeing untracked persist buffer (no CVSS, Linux)
- [CVE-2025-40016](https://cve.now/CVE-2025-40016.md): media: uvcvideo: Mark invalid entities with id UVC\_INVALID\_ENTITY\_ID (no CVSS, Linux)
- [CVE-2025-40015](https://cve.now/CVE-2025-40015.md): media: stm32-csi: Fix dereference before NULL check (no CVSS, Linux)
- [CVE-2025-40013](https://cve.now/CVE-2025-40013.md): ASoC: qcom: audioreach: fix potential null pointer dereference (no CVSS, Linux)
- [CVE-2025-40012](https://cve.now/CVE-2025-40012.md): net/smc: fix warning in smc\_rx\_splice() when calling get\_page() (CVSS 7.8, Linux)
- [CVE-2025-40011](https://cve.now/CVE-2025-40011.md): drm/gma500: Fix null dereference in hdmi teardown (no CVSS, Linux)
- [CVE-2025-40010](https://cve.now/CVE-2025-40010.md): afs: Fix potential null pointer dereference in afs\_put\_server (no CVSS, Linux)
- [CVE-2025-40009](https://cve.now/CVE-2025-40009.md): fs/proc/task\_mmu: check p-\>vec\_buf for NULL (no CVSS, Linux)
- [CVE-2025-40008](https://cve.now/CVE-2025-40008.md): kmsan: fix out-of-bounds access to shadow memory (no CVSS, Linux)
- [CVE-2025-40007](https://cve.now/CVE-2025-40007.md): netfs: fix reference leak (no CVSS, Linux)
- [CVE-2025-40006](https://cve.now/CVE-2025-40006.md): mm/hugetlb: fix folio is still mapped when deleted (CVSS 7.8, Linux)
- [CVE-2025-40005](https://cve.now/CVE-2025-40005.md): spi: cadence-quadspi: Implement refcount to handle unbind during busy (no CVSS, Linux)
- [CVE-2025-57738](https://cve.now/CVE-2025-57738.md): Apache Syncope: Remote Code Execution by delegated administrators (CVSS 7.2, Apache Software Foundation Apache Syncope · org.apache.sync…)
- [CVE-2025-8884](https://cve.now/CVE-2025-8884.md): IDOR in VHS Electronic Software's ACE Center (CVSS 5.5, VHS Electronic Software Ltd. ACE Center)
- [CVE-2025-41390](https://cve.now/CVE-2025-41390.md): An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. (CVSS 7.8, Truffle Security TruffleHog)
- [CVE-2025-11680](https://cve.now/CVE-2025-11680.md): Out-of-bounds Write in libwebsockets PNG parsing (CVSS 5.9, warmcat libwebsockets)
- [CVE-2025-11679](https://cve.now/CVE-2025-11679.md): Out-of-bounds Read in libwebsockets PNG parsing (CVSS 5.9, warmcat libwebsockets)
- [CVE-2025-11678](https://cve.now/CVE-2025-11678.md): Stack-based Buffer Overflow in libwebsockets DNS response parsing (CVSS 7.5, warmcat libwebsocket)
- [CVE-2025-11677](https://cve.now/CVE-2025-11677.md): Use After Free in libwebsockets WebSocket server (CVSS 6.3, warmcat libwebsockets)
- [CVE-2025-8349](https://cve.now/CVE-2025-8349.md): Cross-Site Scripting (XSS) stored in Tawk Live Chat (CVSS 5.3, Tawk Live Chat)
- [CVE-2025-41028](https://cve.now/CVE-2025-41028.md): SQL injection in Epsilon RH (CVSS 9.3, Grupo Castilla Epsilon RH)
- [CVE-2025-57837](https://cve.now/CVE-2025-57837.md): Tileservice module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confident (CVSS 2.9, Honor FCP-AN10)
- [CVE-2025-57839](https://cve.now/CVE-2025-57839.md): Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality (CVSS 4.0, Honor MagicOS)
- [CVE-2025-57838](https://cve.now/CVE-2025-57838.md): Some Honor products are affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confide (CVSS 4.0, Honor MagicOS)
- [CVE-2025-31342](https://cve.now/CVE-2025-31342.md): Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous Type (CVSS 9.3, Galaxy Software Services Vitals ESP)
- [CVE-2025-61932](https://cve.now/CVE-2025-61932.md): Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, (CVSS 9.8, KEV, MOTEX Lanscope Endpoint Manager (On-Premises) (Client progr…)
- [CVE-2025-62577](https://cve.now/CVE-2025-62577.md): ETERNUS SF provided by Fsas Technologies Inc. (CVSS 8.8, Fsas Technologies ETERNUS SF AdvancedCopy Manager Standa… +3)
- [CVE-2025-40004](https://cve.now/CVE-2025-40004.md): net/9p: Fix buffer overflow in USB transport layer (no CVSS, Linux)
- [CVE-2025-11948](https://cve.now/CVE-2025-11948.md): Excellent Infotek｜Document Management System - Arbitrary File Upload (CVSS 9.3, Excellent Infotek Document Management System)
- [CVE-2024-55568](https://cve.now/CVE-2024-55568.md): An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, (CVSS 7.5)
- [CVE-2025-26781](https://cve.now/CVE-2025-26781.md): An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, (CVSS 7.5)
- [CVE-2025-26782](https://cve.now/CVE-2025-26782.md): An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, (CVSS 7.5)
- [CVE-2025-48025](https://cve.now/CVE-2025-48025.md): In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an imprope (CVSS 4.3)
- [CVE-2025-54764](https://cve.now/CVE-2025-54764.md): Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls\_mpi\_mod\_inv or mbedtls\_mpi\_gc (CVSS 6.2)
- [CVE-2025-54957](https://cve.now/CVE-2025-54957.md): An issue was discovered in Dolby UDC 4.5 through 4.13. (CVSS 9.8)
- [CVE-2025-56219](https://cve.now/CVE-2025-56219.md): Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. (CVSS 7.1)
- [CVE-2025-56223](https://cve.now/CVE-2025-56223.md): A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) (CVSS 7.5)
- [CVE-2025-56224](https://cve.now/CVE-2025-56224.md): A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification vi (CVSS 8.1)
- [CVE-2025-60781](https://cve.now/CVE-2025-60781.md): PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant\_name parameter. (CVSS 6.1)
- [CVE-2025-60783](https://cve.now/CVE-2025-60783.md): There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. (CVSS 6.5)
- [CVE-2025-60856](https://cve.now/CVE-2025-60856.md): Reolink Video Doorbell WiFi DB\_566128M5MP\_W allows root shell access through an unsecured UART/serial console. (CVSS 6.8)
- [CVE-2025-61301](https://cve.now/CVE-2025-61301.md): Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can subm (CVSS 7.5)
- [CVE-2025-61303](https://cve.now/CVE-2025-61303.md): Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows beha (CVSS 9.8)
- [CVE-2025-61417](https://cve.now/CVE-2025-61417.md): Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media\_manager component. (CVSS 8.8, tastyigniter/tastyigniter)
- [CVE-2025-61454](https://cve.now/CVE-2025-61454.md): A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. (CVSS 6.1)
- [CVE-2025-61455](https://cve.now/CVE-2025-61455.md): SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. (CVSS 9.8)
- [CVE-2025-61456](https://cve.now/CVE-2025-61456.md): A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. (CVSS 6.1)
- [CVE-2025-61488](https://cve.now/CVE-2025-61488.md): An issue in Senayan Library Management System (SLiMS) 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrap\_imag (CVSS 7.6)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.