CVEs published in September 2025
4,151 vulnerabilities, 293 critical, 16 exploited.
- keysight ixia vision product family Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key 8.7 High
- liferay dxp, portal, digital experience platform +2 more Liferay Portal Vulnerable to XSS in Web Content translation 4.8 Medium
- mantra-chain mantrachain MANTRA tx gas limit is not enforced in send hooks 8.8 High
- megasys telenium online web application: MegaSys Enterprises Telenium Online Web Application OS Command Injection 9.3 Critical
- ibm planning analytics local IBM Planning Analytics Local information disclosure 4.9 Medium
- ibm planning analytics local IBM Planning Analytics Local cross-site scripting 5.4 Medium
- liferay dxp, portal, digital experience platform +2 more Liferay Portal Vulnerable to IDOR via audit events 5.3 Medium
- argoproj argo cd, argo-cd +1 more Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook 7.5 High
- argoproj argo-cd, argo cd +1 more argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload 7.5 High
- rapid7 appspider pro Rapid7 AppSpider Project Name Validation Bypass 3.3 Low
- argoproj argo cd, argo-cd +1 more Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload 7.5 High
- argoproj argo cd, argo-cd +1 more Repository Credentials Race Condition Crashes Argo CD Server 6.5 Medium
- nvidia dls component of nvidia license system NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an... 8.7 High
- nvidia dls component of nvidia license system NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection... 4.6 Medium
- nvidia dls component of nvidia license system NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an... 2.4 Low
- opendatahub-io opendatahub-operator, red hat openshift ai 2.16, openshift ai 2.19 +3 more +5 more Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin 9.9 Critical
- framelink figma mcp server figma-developer-mcp vulnerable to command injection in get_figma_data tool 8.0 High
- framelink figma mcp server Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability 9.8 Critical
- ni circuit design suite Out of Bounds Read in DefaultFontOptions() in NI Circuit Design Suite 8.5 High
- ni circuit design suite Memory Corruption issue in XML_Serialize() in NI Circuit Design Suite 8.5 High
- joomla! project cms Joomla! Core - [20250902] User-Enumeration in passkey authentication method 5.3 Medium
- joomla! project cms Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code 4.8 Medium
- acronis true image, true image for sandisk, true image for western digital +1 more +3 more Local privilege escalation due to insecure XPC service configuration. The following products are... 8.8 High
- acronis true image, true image for sandisk, true image for western digital +1 more +3 more Local privilege escalation due to DLL hijacking vulnerability. The following products are... 7.3 High
- red hat openshift ai 2.16, openshift ai 2.19, openshift ai 2.21 +2 more +4 more Openshift-ai: privilege escalation via excessive /etc/passwd permissions 6.4 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 more Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key 10.0 Critical
- mozilla firefox, firefox for ios +1 more Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs 4.0 Medium
- mozilla firefox JIT miscompilation in the JavaScript Engine: JIT component 7.5 High
- mozilla firefox Sandbox escape due to integer overflow in the Graphics: Canvas2D component 8.6 High
- hitachi energy asset suite A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of... 6.0 Medium
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- boldworkplanner bold workplanner Insecure Direct Object Reference in GPS BOLD Workplanner 7.1 High
- polska akademia dostępności pad cms Blind SQL Injection in PAD CMS 8.7 High
- polska akademia dostępności pad cms Blind SQL Injection in PAD CMS 8.7 High
- polska akademia dostępności pad cms Remote Code Execution via Unrestricted File Upload in PAD CMS 10.0 Critical
- polska akademia dostępności pad cms Cross-Site Request Forgery in PAD CMS 5.1 Medium
- polska akademia dostępności pad cms Bruteforce Protection Bypass in PAD CMS 6.9 Medium
- polska akademia dostępności pad cms Account Takeover via Reset Password Functionality in PAD CMS 8.7 High
- polska akademia dostępności pad cms Reflected XSS in PAD CMS 5.1 Medium
- polska akademia dostępności pad cms Remote Code Execution via Unrestricted File Upload in PAD CMS 10.0 Critical
- polska akademia dostępności pad cms Remote Code Execution via Unrestricted File Upload in PAD CMS 10.0 Critical
-
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 more Update of kernel No score - affiliatewp AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection 7.5 High
- Show olderLoading…