CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- multicam systems pan-tilt-zoom cameras, multicam-systems mcamii ptz firmware, ptzoptics 12x fixed camera/ndi fixed camera +81 more +83 morePan-Tilt-Zoom cameras default administrative credentials for web interface9.2 Critical
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK2.3 Low
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station accept unsigned firmware7.5 High
- multicam systems pan-tilt-zoom cameras, multicam-systems mcamii ptz firmware, ptzoptics 12x fixed camera/ndi fixed camera +71 more +73 morePan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled9.3 Critical
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station Hard-Coded AES Encryption2.3 Low
- eladminelunez eladmin Email Address updateEmail updateUserEmail improper authorization2.3 Low
- linux, linux kernel +1 mores390/ism: fix concurrency management in ism_cmd()9.8 Critical
- linux, linux kernel +1 moremm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 moreserial: 8250: fix panic due to PSLVERR5.5 Medium
- linux, linux kernel +1 morenetfs: Fix unbuffered write error handling7.1 High
- linux, linux kernel +1 morecrypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: qat - flush misc workqueue during device shutdown5.5 Medium
- linux, linux kernel +1 moreksmbd: fix refcount leak causing resource not released7.5 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreiio: imu: bno055: fix OOB access of hw_xlate array7.1 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morevsock/virtio: Validate length in packet header before skb_put()8.4 High
- linux, linux kernel +1 moreopen_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreparisc: Revise __get_user() to probe user read access5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreparisc: Revise gateway LWS calls to probe user read access5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: usbtv: Lock resolution while streaming7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()4.7 Medium
- linux, linux kernel +1 moremedia: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval5.5 Medium
- linux, linux kernel +1 moremedia: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: venus: Add a check for packet size after reading from shared memory7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: venus: protect against spurious interrupts during probe5.5 Medium
- linux, linux kernel +1 moremedia: iris: Fix NULL pointer dereference5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moredrm/amdkfd: Destroy KFD debugfs after destroy KFD wq5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: fix a Null pointer dereference vulnerability5.5 Medium
- linux, linux kernel +1 moreLoongArch: KVM: Fix stack protector issue in send_ipi_data()8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morenet, hsr: reject HSR frame if skb can't hold tag9.8 Critical
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreipv6: sr: Fix MAC comparison to be constant-time9.8 Critical
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreACPI: pfr_update: Fix the driver update version check7.8 High
- linux, linux kernel +1 moremm/damon/ops-common: ignore migration request to invalid nodes5.5 Medium
- linux, linux kernel +1 moreiommu/riscv: prevent NULL deref in iova_to_phys5.5 Medium
- linux, linux kernel +1 moreio_uring/futex: ensure io_futex_wait() cleans up properly on failure7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 moreNFS: Fix a race when updating an existing write7.8 High
- linux, linux kernel +1 moreALSA: hda: tas2781: Fix wrong reference of tasdevice_priv7.8 High
- linux, linux kernel +1 moreRDMA/rxe: Flush delayed SKBs while releasing RXE resources5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 mores390/sclp: Fix SCCB present check7.3 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moredrm/amd/display: Avoid a NULL pointer dereference5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moresmb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morefs/buffer: fix use-after-free when call bh_read() helper7.8 High
- linux, linux kernel +1 moreiio: accel: sca3300: fix uninitialized iio scan data5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 moreftrace: Also allocate and copy hash for reading of filter files7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreiio: light: as73211: Ensure buffer holes are zeroed7.1 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morecomedi: Make insn_rw_emulate_bits() do insn->n samples7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morecomedi: pcl726: Prevent invalid irq number7.1 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morecomedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 moretracing: Limit access to parser->buffer when trace_get_user failed7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +1 more +3 moretls: fix handling of zero-length records on the rx_list9.8 Critical
- Show moreLoading…