Skip to content
OpenAdvisories

Archive

October 2025

Vulnerabilities first published in this month (UTC), newest first.

← September 2025 2025 / October November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-61757 Exploited Public exploit Scanner template EPSS 89%

    Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported vers…

    Oracle Identity Manager
    KEV Nov 21, 2025
  • Critical 9.8
    CVE-2025-61932 Exploited

    Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin o…

    MOTEX Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))
    KEV Oct 22, 2025
  • Critical 9.8
    CVE-2025-53521 Exploited

    BigIP APM Vulnerability

    When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Network devices
    KEV Mar 27, 2026
  • Critical 9.8
    CVE-2025-59287 Exploited Public exploit Scanner template EPSS 100%

    Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

    Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
    KEV Oct 24, 2025
  • High 7.8
    CVE-2025-59230 Exploited

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

    Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 14, 2025
  • High 7.8
    CVE-2025-24990 Exploited Public exploit

    Windows Agere Modem Driver Elevation of Privilege Vulnerability

    Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulat…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 14, 2025
  • High 7.8
    CVE-2025-39964 Exploited Public exploit

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • High 7.5
    CVE-2025-61884 Exploited · Ransomware Public exploit Scanner template EPSS 96%

    Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions…

    Oracle Oracle Configurator
    KEV Oct 20, 2025
  • High 7.5
    CVE-2025-11371 Exploited Public exploit Scanner template EPSS 92%

    Gladinet CentreStack and TrioFox Local File Inclusion Flaw

    In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This…

    Gladinet CentreStack and TrioFox
    KEV Nov 4, 2025
  • Critical 9.8
    CVE-2025-61882 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integrati…

    Oracle Oracle Concurrent Processing
    KEV Oct 6, 2025