CVEs published October 23, 2025
97 CVEs were published on October 23, 2025: 6 critical, 30 high.
- Published
- 97
- Critical
- 6
- High
- 30
- Medium
- 59
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 47
Most affected products
- AutomationDirect Productivity Suite · AutomationDirect P… +6
- 9
- moodle · moodle/moodle
- 7
- Gallagher Command Centre Server
- 5
- Arista Networks Arista Edge Threat Management - Arista Next…
- 3
- Liferay Portal · Liferay DXP +1
- 3
- ArkSigner Software and Hardware AcBakImzala
- 2
- Azure Access Technology BLU-IC2 · Azure Access Technology B…
- 2
- HashiCorp Vault · github.com/hashicorp/vault
- 2
- keycloak · Red Hat build of Keycloak +1
- 2
- moodle
- 2
Critical 6
- CVE-2025-61934AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327AutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-59503Azure Compute Resource Provider Elevation of Privilege VulnerabilityMicrosoft Azure Compute Resource Provider
- CVE-2025-58428Command Injection in Veeder-Root TLS4B Automatic Tank Gauge SystemVeeder-Root TLS4B Automatic Tank Gauge System
- CVE-2025-11023Local File Inclusion in ArkSigner's AcBakImzalaArkSigner Software and Hardware AcBakImzala
- CVE-2025-12104Incorrect Content-Type HeaderAzure Access Technology BLU-IC2 · Azure Access Technology B…
- CVE-2025-47699Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authGallagher Command Centre Server
High 30
- CVE-2025-58429AutomationDirect Productivity Suite Relative Path TraversalAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-58078AutomationDirect Productivity Suite Relative Path TraversalAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-58456AutomationDirect Productivity Suite Relative Path TraversalAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-61977AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten PasswordAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-62498AutomationDirect Productivity Suite Relative Path TraversalAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-59273Azure Event Grid System Elevation of Privilege VulnerabilityMicrosoft Azure Event Grid System
- CVE-2025-59500Azure Notification Service Elevation of Privilege VulnerabilityMicrosoft Azure Notification Service
- CVE-2025-12100MongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directoriesMongoDB BI Connector ODBC driver
- CVE-2025-55067Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge SystemVeeder-Root TLS4B Automatic Tank Gauge System
- CVE-2025-12044Vault Vulnerable to Denial of Service Due to Rate Limit RegressionHashiCorp Vault · github.com/hashicorp/vault
- CVE-2025-11621Vault AWS auth method bypass due to AWS client cacheHashiCorp Vault · github.com/hashicorp/vault
- CVE-2025-6978Diagnostics command injection vulnerabilityArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2025-6979Captive Portal can allow authentication bypassArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2025-6980Captive Portal can expose sensitive informationArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2025-23352NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access.NVIDIA Virtual GPU Manager
- CVE-2025-23347NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1
- CVE-2025-54808Oxford Nanopore Technologies MinKNOW Insufficiently Protected CredentialsOxford Nanopore Technologies MinKNOW
- CVE-2025-62713Kottster app reinitialization can be re-triggered allowing command injection in development modekottster · @kottster/server
- CVE-2025-62169OctoPrint-SpoolManager Plugin APIs do not enforce authenticationWildRikku OctoPrint-SpoolManager
- CVE-2025-59048OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Methodopenbao-plugins · github.com/openbao/openbao-plugins
- CVE-2025-53702DoS vulnerability in Vilar VS-IPC1002 IP camerasVilar VS-IPC1002
- CVE-2025-62399Moodle: password brute force risk when mobile/web services enabledmoodle · moodle/moodle
- CVE-2025-41073Path Traversal in Gandia Integra Total by TESITESI Gandia Integra Total
- CVE-2025-12105Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completionGNOME libsoup · Red Hat Enterprise Linux
- CVE-2025-10914Reflected XSS in Proliz's OBSProliz Software Ltd. OBS
- CVE-2025-11575MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directoriesMongoDB Atlas SQL ODBC driver
- CVE-2025-50950Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.
- CVE-2025-54964An issue was discovered in BAE SOCET GXP before 4.6.0.2.
- CVE-2025-61132A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct passwor
- CVE-2025-61136A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct passw
Medium, low and unrated 61
- CVE-2025-7730Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameterboldthemes Bold Page Builder
- CVE-2025-60023AutomationDirect Productivity Suite Relative Path TraversalAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-59776AutomationDirect Productivity Suite Relative Path TraversalAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-62254The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 202Liferay Portal · Liferay DXP +1
- CVE-2025-62688AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical ResourceAutomationDirect Productivity Suite · AutomationDirect P… +6
- CVE-2025-57848Container-native-virtualization: privilege escalation via excessive /etc/passwd permissionsRed Hat RHEL-8-CNV-4.12 · Red Hat RHEL-9-CNV-4.14 +5
- CVE-2025-62517Rollbar.js Prototype Pollution Vulnerability in merge()rollbar.js · rollbar
- CVE-2025-62236Frontier Airlines publicly available email address validationFrontier Airlines flyfrontier.com
- CVE-2025-62255Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older uLiferay Portal · Liferay DXP +1
- CVE-2025-23345NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds readNVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2025-23332NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deferNVIDIA Virtual GPU Manager · NVIDIA GeForce +3
- CVE-2025-23330NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference.NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2
- CVE-2025-10937Oxford Nanopore Technologies MinKNOW Improper Check for Unusual or Exceptional ConditionsOxford Nano Technologies MinKNOW
- CVE-2025-23300NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocaNVIDIA Virtual GPU Manager · NVIDIA GeForce +3
- CVE-2025-34156Tibbo AggreGate Network Manager < 6.40.05 System Information ExposureTibbo Systems AggreGate Network Manager
- CVE-2025-34155Tibbo AggreGate Network Manager < 6.40.05 Login Functionality User EnumerationTibbo Systems AggreGate Network Manager
- CVE-2025-12114Serial Console EnabledAzure Access Technology BLU-IC2 · Azure Access Technology B…
- CVE-2025-12110Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removedkeycloak · Red Hat build of Keycloak +1
- CVE-2025-11429Keycloak-server: too long and not settings compliant sessionkeycloak · Red Hat build of Keycloak +1
- CVE-2025-1680An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attMoxa TN-4500A Series · Moxa TN-5500A Series +2
- CVE-2025-1679Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject maliciMoxa TN-4500A Series · Moxa TN-5500A Series +2
- CVE-2025-62256Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, Liferay Portal · Liferay DXP +1
- CVE-2025-53701XSS vulnerability in Vilar VS-IPC1002 IP camerasVilar VS-IPC1002
- CVE-2025-10705MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request ForgeryMxChat – AI Chatbot & Content Generation for WordPress
- CVE-2025-11128Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgerythemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2025-8427Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'The Beaver Builder Team Beaver Builder Plugin
- CVE-2025-62401Moodle: possible to bypass timer in timed assignmentsmoodle · moodle/moodle
- CVE-2025-62395Moodle: external cohort search service leaks system cohort datamoodle
- CVE-2025-62400Moodle: hidden group names visible to event creatorsmoodle · moodle/moodle
- CVE-2025-62398Moodle: possible to bypass mfamoodle · moodle/moodle
- CVE-2025-62397Moodle: router produces json instead of 404 error for invalid course idmoodle
- CVE-2025-62396Moodle: router (r.php) could expose application directoriesmoodle · moodle/moodle
- CVE-2025-62394Moodle: quiz notifications sent to suspended participantsmoodle · moodle/moodle
- CVE-2025-62393Moodle: course access permissions not properly checked in course_output_fragment_course_overviewmoodle · moodle/moodle
- CVE-2025-10355Open redirection vulnerability in MOLGENIS EMX2MOLGENIS EMX2
- CVE-2025-40643Stored Cross-Site Scripting (XSS) in Energy CRM by Status TrackerStatus Tracker Energy CRM
- CVE-2025-9981Multiple Stored XSS in QuickCMSOpenSolution QuickCMS
- CVE-2025-9980Multiple Stored XSS in QuickCMSOpenSolution QuickCMS
- CVE-2025-10727Reflected XSS in ArkSigner's AcBakImzalaArkSigner Software and Hardware AcBakImzala
- CVE-2025-61865Multiple NAS management applications provided by I-O DATA DEVICE, INC.I-O DATA DEVICE NarSuS App · I-O DATA DEVICE Clone for Wind…
- CVE-2025-54806GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function.GROWI
- CVE-2025-62499Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page.Six Apart Movable Type
- CVE-2025-54856Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page.Six Apart Movable Type
- CVE-2025-48430Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server atGallagher Command Centre Server
- CVE-2025-48428Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to thGallagher Command Centre Server
- CVE-2025-41402Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid competeGallagher Command Centre Server
- CVE-2025-35981Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privileged Operator to vieGallagher Command Centre Server
- CVE-2025-50949FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
- CVE-2025-50951FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.
- CVE-2025-54963An issue was discovered in BAE SOCET GXP before 4.6.0.2.
- CVE-2025-54966An issue was discovered in BAE SOCET GXP before 4.6.0.2.
- CVE-2025-56007CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with fu
- CVE-2025-56008Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to take
- CVE-2025-56009Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via
- CVE-2025-57240Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the
- CVE-2025-60837A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a usenet.mingsoft:ms-mcms
- CVE-2025-60852A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600.
- CVE-2025-60859Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parame
- CVE-2025-61413A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitraryPiranha
- CVE-2025-61464gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php.
- CVE-2025-62820Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.Slack Nebula · github.com/slackhq/nebula