# CVEs published 2025-10-23

97 CVEs were published on October 23, 2025: 6 critical, 30 high. Days are UTC.

- [CVE-2025-7730](https://cve.now/CVE-2025-7730.md): Bold Page Builder \<= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`percentage\` Parameter (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2025-60023](https://cve.now/CVE-2025-60023.md): AutomationDirect Productivity Suite Relative Path Traversal (CVSS 6.3, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-59776](https://cve.now/CVE-2025-59776.md): AutomationDirect Productivity Suite Relative Path Traversal (CVSS 6.3, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-62254](https://cve.now/CVE-2025-62254.md): The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 202 (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-58429](https://cve.now/CVE-2025-58429.md): AutomationDirect Productivity Suite Relative Path Traversal (CVSS 8.3, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-58078](https://cve.now/CVE-2025-58078.md): AutomationDirect Productivity Suite Relative Path Traversal (CVSS 8.3, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-58456](https://cve.now/CVE-2025-58456.md): AutomationDirect Productivity Suite Relative Path Traversal (CVSS 8.2, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-61934](https://cve.now/CVE-2025-61934.md): AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327 (CVSS 9.3, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-62688](https://cve.now/CVE-2025-62688.md): AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource (CVSS 6.9, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-61977](https://cve.now/CVE-2025-61977.md): AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password (CVSS 7.3, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-62498](https://cve.now/CVE-2025-62498.md): AutomationDirect Productivity Suite Relative Path Traversal (CVSS 8.6, AutomationDirect Productivity Suite · AutomationDirect P… +6)
- [CVE-2025-59503](https://cve.now/CVE-2025-59503.md): Azure Compute Resource Provider Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure Compute Resource Provider)
- [CVE-2025-59273](https://cve.now/CVE-2025-59273.md): Azure Event Grid System Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Azure Event Grid System)
- [CVE-2025-59500](https://cve.now/CVE-2025-59500.md): Azure Notification Service Elevation of Privilege Vulnerability (CVSS 7.7, Microsoft Azure Notification Service)
- [CVE-2025-12100](https://cve.now/CVE-2025-12100.md): MongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories (CVSS 8.8, MongoDB BI Connector ODBC driver)
- [CVE-2025-57848](https://cve.now/CVE-2025-57848.md): Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions (CVSS 6.4, Red Hat RHEL-8-CNV-4.12 · Red Hat RHEL-9-CNV-4.14 +5)
- [CVE-2025-62517](https://cve.now/CVE-2025-62517.md): Rollbar.js Prototype Pollution Vulnerability in merge() (CVSS 5.9, rollbar.js · rollbar)
- [CVE-2025-58428](https://cve.now/CVE-2025-58428.md): Command Injection in Veeder-Root TLS4B Automatic Tank Gauge System (CVSS 9.4, Veeder-Root TLS4B Automatic Tank Gauge System)
- [CVE-2025-55067](https://cve.now/CVE-2025-55067.md): Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System (CVSS 7.1, Veeder-Root TLS4B Automatic Tank Gauge System)
- [CVE-2025-62236](https://cve.now/CVE-2025-62236.md): Frontier Airlines publicly available email address validation (CVSS 5.3, Frontier Airlines flyfrontier.com)
- [CVE-2025-12044](https://cve.now/CVE-2025-12044.md): Vault Vulnerable to Denial of Service Due to Rate Limit Regression (CVSS 7.5, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2025-11621](https://cve.now/CVE-2025-11621.md): Vault AWS auth method bypass due to AWS client cache (CVSS 8.1, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2025-6978](https://cve.now/CVE-2025-6978.md): Diagnostics command injection vulnerability (CVSS 7.2, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2025-62255](https://cve.now/CVE-2025-62255.md): Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older u (CVSS 2.0, Liferay Portal · Liferay DXP +1)
- [CVE-2025-6979](https://cve.now/CVE-2025-6979.md): Captive Portal can allow authentication bypass (CVSS 8.8, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2025-6980](https://cve.now/CVE-2025-6980.md): Captive Portal can expose sensitive information (CVSS 7.5, Arista Networks Arista Edge Threat Management - Arista Next…)
- [CVE-2025-23352](https://cve.now/CVE-2025-23352.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. (CVSS 7.8, NVIDIA Virtual GPU Manager)
- [CVE-2025-23347](https://cve.now/CVE-2025-23347.md): NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. (CVSS 7.8, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +1)
- [CVE-2025-23345](https://cve.now/CVE-2025-23345.md): NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read (CVSS 4.4, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2025-23332](https://cve.now/CVE-2025-23332.md): NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer defer (CVSS 5.0, NVIDIA Virtual GPU Manager · NVIDIA GeForce +3)
- [CVE-2025-23330](https://cve.now/CVE-2025-23330.md): NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. (CVSS 5.5, NVIDIA GeForce · NVIDIA RTX, Quadro, NVS +2)
- [CVE-2025-10937](https://cve.now/CVE-2025-10937.md): Oxford Nanopore Technologies MinKNOW Improper Check for Unusual or Exceptional Conditions (CVSS 6.8, Oxford Nano Technologies MinKNOW)
- [CVE-2025-23300](https://cve.now/CVE-2025-23300.md): NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by alloca (CVSS 5.5, NVIDIA Virtual GPU Manager · NVIDIA GeForce +3)
- [CVE-2025-54808](https://cve.now/CVE-2025-54808.md): Oxford Nanopore Technologies MinKNOW Insufficiently Protected Credentials (CVSS 7.3, Oxford Nanopore Technologies MinKNOW)
- [CVE-2025-34156](https://cve.now/CVE-2025-34156.md): Tibbo AggreGate Network Manager \< 6.40.05 System Information Exposure (CVSS 6.9, Tibbo Systems AggreGate Network Manager)
- [CVE-2025-34155](https://cve.now/CVE-2025-34155.md): Tibbo AggreGate Network Manager \< 6.40.05 Login Functionality User Enumeration (CVSS 6.9, Tibbo Systems AggreGate Network Manager)
- [CVE-2025-62713](https://cve.now/CVE-2025-62713.md): Kottster app reinitialization can be re-triggered allowing command injection in development mode (CVSS 7.2, kottster · @kottster/server)
- [CVE-2025-62169](https://cve.now/CVE-2025-62169.md): OctoPrint-SpoolManager Plugin APIs do not enforce authentication (CVSS 8.1, WildRikku OctoPrint-SpoolManager)
- [CVE-2025-12114](https://cve.now/CVE-2025-12114.md): Serial Console Enabled (CVSS 5.2, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-59048](https://cve.now/CVE-2025-59048.md): OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method (CVSS 8.1, openbao-plugins · github.com/openbao/openbao-plugins)
- [CVE-2025-12110](https://cve.now/CVE-2025-12110.md): Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline\_access scope was removed (CVSS 5.4, keycloak · Red Hat build of Keycloak +1)
- [CVE-2025-11429](https://cve.now/CVE-2025-11429.md): Keycloak-server: too long and not settings compliant session (CVSS 5.4, keycloak · Red Hat build of Keycloak +1)
- [CVE-2025-1680](https://cve.now/CVE-2025-1680.md): An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows att (CVSS 0.0, Moxa TN-4500A Series · Moxa TN-5500A Series +2)
- [CVE-2025-1679](https://cve.now/CVE-2025-1679.md): Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malici (CVSS 4.8, Moxa TN-4500A Series · Moxa TN-5500A Series +2)
- [CVE-2025-62256](https://cve.now/CVE-2025-62256.md): Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-53701](https://cve.now/CVE-2025-53701.md): XSS vulnerability in Vilar VS-IPC1002 IP cameras (CVSS 4.8, Vilar VS-IPC1002)
- [CVE-2025-53702](https://cve.now/CVE-2025-53702.md): DoS vulnerability in Vilar VS-IPC1002 IP cameras (CVSS 7.1, Vilar VS-IPC1002)
- [CVE-2025-10705](https://cve.now/CVE-2025-10705.md): MxChat – AI Chatbot for WordPress \<= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery (CVSS 5.3, MxChat – AI Chatbot & Content Generation for WordPress)
- [CVE-2025-11128](https://cve.now/CVE-2025-11128.md): Feedzy RSS Feeds Lite \<= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery (CVSS 5.0, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…)
- [CVE-2025-8427](https://cve.now/CVE-2025-8427.md): Beaver Builder Plugin (Starter Version) \<= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto\_play' (CVSS 6.4, The Beaver Builder Team Beaver Builder Plugin)
- [CVE-2025-11023](https://cve.now/CVE-2025-11023.md): Local File Inclusion in ArkSigner's AcBakImzala (CVSS 9.8, ArkSigner Software and Hardware AcBakImzala)
- [CVE-2025-62401](https://cve.now/CVE-2025-62401.md): Moodle: possible to bypass timer in timed assignments (CVSS 5.4, moodle · moodle/moodle)
- [CVE-2025-62395](https://cve.now/CVE-2025-62395.md): Moodle: external cohort search service leaks system cohort data (CVSS 4.3, moodle)
- [CVE-2025-62400](https://cve.now/CVE-2025-62400.md): Moodle: hidden group names visible to event creators (CVSS 4.3, moodle · moodle/moodle)
- [CVE-2025-62399](https://cve.now/CVE-2025-62399.md): Moodle: password brute force risk when mobile/web services enabled (CVSS 7.5, moodle · moodle/moodle)
- [CVE-2025-62398](https://cve.now/CVE-2025-62398.md): Moodle: possible to bypass mfa (CVSS 5.4, moodle · moodle/moodle)
- [CVE-2025-62397](https://cve.now/CVE-2025-62397.md): Moodle: router produces json instead of 404 error for invalid course id (CVSS 5.3, moodle)
- [CVE-2025-62396](https://cve.now/CVE-2025-62396.md): Moodle: router (r.php) could expose application directories (CVSS 5.3, moodle · moodle/moodle)
- [CVE-2025-62394](https://cve.now/CVE-2025-62394.md): Moodle: quiz notifications sent to suspended participants (CVSS 4.3, moodle · moodle/moodle)
- [CVE-2025-62393](https://cve.now/CVE-2025-62393.md): Moodle: course access permissions not properly checked in course\_output\_fragment\_course\_overview (CVSS 4.3, moodle · moodle/moodle)
- [CVE-2025-10355](https://cve.now/CVE-2025-10355.md): Open redirection vulnerability in MOLGENIS EMX2 (CVSS 5.1, MOLGENIS EMX2)
- [CVE-2025-41073](https://cve.now/CVE-2025-41073.md): Path Traversal in Gandia Integra Total by TESI (CVSS 7.1, TESI Gandia Integra Total)
- [CVE-2025-40643](https://cve.now/CVE-2025-40643.md): Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker (CVSS 5.1, Status Tracker Energy CRM)
- [CVE-2025-9981](https://cve.now/CVE-2025-9981.md): Multiple Stored XSS in QuickCMS (CVSS 4.8, OpenSolution QuickCMS)
- [CVE-2025-9980](https://cve.now/CVE-2025-9980.md): Multiple Stored XSS in QuickCMS (CVSS 4.8, OpenSolution QuickCMS)
- [CVE-2025-12105](https://cve.now/CVE-2025-12105.md): Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion (CVSS 7.5, GNOME libsoup · Red Hat Enterprise Linux)
- [CVE-2025-10914](https://cve.now/CVE-2025-10914.md): Reflected XSS in Proliz's OBS (CVSS 7.6, Proliz Software Ltd. OBS)
- [CVE-2025-10727](https://cve.now/CVE-2025-10727.md): Reflected XSS in ArkSigner's AcBakImzala (CVSS 5.4, ArkSigner Software and Hardware AcBakImzala)
- [CVE-2025-61865](https://cve.now/CVE-2025-61865.md): Multiple NAS management applications provided by I-O DATA DEVICE, INC. (CVSS 6.7, I-O DATA DEVICE NarSuS App · I-O DATA DEVICE Clone for Wind…)
- [CVE-2025-54806](https://cve.now/CVE-2025-54806.md): GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function. (CVSS 6.1, GROWI)
- [CVE-2025-62499](https://cve.now/CVE-2025-62499.md): Movable Type contains a stored cross-site scripting vulnerability in Edit CategorySet of ContentType page. (CVSS 4.8, Six Apart Movable Type)
- [CVE-2025-54856](https://cve.now/CVE-2025-54856.md): Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. (CVSS 4.8, Six Apart Movable Type)
- [CVE-2025-12104](https://cve.now/CVE-2025-12104.md): Incorrect Content-Type Header (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-48430](https://cve.now/CVE-2025-48430.md): Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at (CVSS 5.5, Gallagher Command Centre Server)
- [CVE-2025-48428](https://cve.now/CVE-2025-48428.md): Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to th (CVSS 6.7, Gallagher Command Centre Server)
- [CVE-2025-47699](https://cve.now/CVE-2025-47699.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an auth (CVSS 9.9, Gallagher Command Centre Server)
- [CVE-2025-41402](https://cve.now/CVE-2025-41402.md): Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid compete (CVSS 5.5, Gallagher Command Centre Server)
- [CVE-2025-35981](https://cve.now/CVE-2025-35981.md): Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privileged Operator to vie (CVSS 5.5, Gallagher Command Centre Server)
- [CVE-2025-11575](https://cve.now/CVE-2025-11575.md): MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories (CVSS 8.8, MongoDB Atlas SQL ODBC driver)
- [CVE-2025-50949](https://cve.now/CVE-2025-50949.md): FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. (CVSS 6.5)
- [CVE-2025-50950](https://cve.now/CVE-2025-50950.md): Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function. (CVSS 7.5)
- [CVE-2025-50951](https://cve.now/CVE-2025-50951.md): FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8\_copy function at /fontforge/sfd.c. (CVSS 6.5)
- [CVE-2025-54963](https://cve.now/CVE-2025-54963.md): An issue was discovered in BAE SOCET GXP before 4.6.0.2. (CVSS 6.5)
- [CVE-2025-54964](https://cve.now/CVE-2025-54964.md): An issue was discovered in BAE SOCET GXP before 4.6.0.2. (CVSS 8.4)
- [CVE-2025-54966](https://cve.now/CVE-2025-54966.md): An issue was discovered in BAE SOCET GXP before 4.6.0.2. (CVSS 4.3)
- [CVE-2025-56007](https://cve.now/CVE-2025-56007.md): CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with fu (CVSS 6.5)
- [CVE-2025-56008](https://cve.now/CVE-2025-56008.md): Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to take (CVSS 6.1)
- [CVE-2025-56009](https://cve.now/CVE-2025-56009.md): Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via (CVSS 5.3)
- [CVE-2025-57240](https://cve.now/CVE-2025-57240.md): Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the (CVSS 6.1)
- [CVE-2025-60837](https://cve.now/CVE-2025-60837.md): A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a use (CVSS 6.1, net.mingsoft:ms-mcms)
- [CVE-2025-60852](https://cve.now/CVE-2025-60852.md): A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. (CVSS 6.5)
- [CVE-2025-60859](https://cve.now/CVE-2025-60859.md): Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c\_id parame (CVSS 6.1)
- [CVE-2025-61132](https://cve.now/CVE-2025-61132.md): A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct passwor (CVSS 7.1)
- [CVE-2025-61136](https://cve.now/CVE-2025-61136.md): A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct passw (CVSS 7.1)
- [CVE-2025-61413](https://cve.now/CVE-2025-61413.md): A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary (CVSS 6.1, Piranha)
- [CVE-2025-61464](https://cve.now/CVE-2025-61464.md): gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search\_table in bbs/search.php. (CVSS 6.5)
- [CVE-2025-62820](https://cve.now/CVE-2025-62820.md): Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network. (CVSS 4.9, Slack Nebula · github.com/slackhq/nebula)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.