CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- debian linux, linux kernel, siemens simatic cn 4100 +2 morecomedi: fix race between polling and detaching7.3 High
- linux, linux kernel +1 moreuserfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 morefbdev: Fix vmalloc out-of-bounds write in fast_imageblit7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morehv_netvsc: Fix panic during namespace deletion with VF5.5 Medium
- linux, linux kernel +1 morei2c: core: Fix double-free of fwnode in i2c_unregister_device()7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 moremm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()4.7 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()7.1 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: venus: Fix OOB read due to missing payload bound check7.3 High
- ibm jazz foundationIBM Jazz Foundation path traversal6.5 Medium
- ibm jazz foundationIBM Jazz Foundation cross-site scripting6.1 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator information disclosure2.7 Low
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator cross-site scripting4.8 Medium
- tesla model 3Tesla Model 3 Physical CAN Bus Injection4.7 Medium
- dotcms cloud services (dcs)dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the ...9.4 Critical
pypa/gh-action-pypi-publishGitHub ActionsPyPI publish GitHub Action vulnerable to injectable expression expansions in action steps0.0 None- weblateWeblate has long session expiry times during second factor verification2.1 Low
- progress software corporation openedgeAuthenticated Command Injection via configuration parameter manipulation in exposed RMI interface8.4 High
- concept intermedia gov cmsSQL Injection in GOV CMS9.3 Critical
- apprain, apprain cmf +1 moreReflected Cross-Site Scripting vulnerability in appRain CMF4.8 Medium
- apprain, apprain cmf +1 moreReflected Cross-Site Scripting vulnerability in appRain CMF4.8 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 moreStored Cross-Site Scripting vulnerability in appRain CMF5.1 Medium
- apprain, apprain cmf +1 morePath Traversal vulnerability in appRain CMF7.1 High
- apprain, apprain cmf +1 moreSQL injection vulnerability in appRain CMF8.7 High
- apprain, apprain cmf +1 moreSQL injection vulnerability in appRain CMF8.7 High
- apprain, apprain cmf +1 moreSQL injection vulnerability in appRain CMF8.7 High
- Show moreLoading…