CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: memory exhaustion via repeated key exchange in libssh3.1 Low
- proximus sp. z o.o. smseagleSQL injection in SMPP component of SMSEagle firmware5.3 Medium
- apache hertzbeat, apache software foundation hertzbeat (incubating) +1 moreApache HertzBeat (incubating): Jmx JNDI injection vulnerability8.8 High
- apache hertzbeat, apache software foundation hertzbeat (incubating) +1 moreApache HertzBeat (incubating): RCE by parse http sitemap xml response8.8 High
- typo3, typo3 cms +1 moreInformation Disclosure via CSV Download5.3 Medium
- typo3, typo3 cms +1 moreInformation Disclosure in Workspaces Module7.1 High
- typo3, typo3 cms +1 moreBroken Access Control in Backend AJAX Routes5.3 Medium
- typo3, typo3 cms +1 moreInformation Disclosure via File Abstraction Layer5.3 Medium
- typo3, typo3 cms +1 moreInsufficient Entropy in Password Generation6.3 Medium
- typo3, typo3 cms +1 moreDenial of Service in TYPO3 Bookmark Toolbar5.1 Medium
- typo3, typo3 cms +1 moreOpen Redirect in TYPO3 CMS5.3 Medium
- beckhoff te1000 | twincat 3 enineeringBeckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering7.8 High
- siemens simatic virtualization as a service (sivaas)A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions...9.3 Critical
- siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +1 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The...2.3 Low
- siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +1 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The...2.3 Low
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo v6.0 +3 more +5 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.7 High
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo v6.0 +3 more +5 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.7 High
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo v6.0 +3 more +5 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.7 High
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo v6.0 +3 more +5 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...9.3 Critical
- siemens apogee pxc series (bacnet), apogee pxc series (p2 ethernet), talon tc series (bacnet) +2 moreA vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC...6.3 Medium
- siemens sinamics g220 v6.4, sinamics s200 v6.4, sinamics s210 v6.4 +3 more +5 moreA vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS...6.9 Medium
- bearsthemes goza - nonprofit charity wordpress themeGoza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion9.1 Critical
- rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpressAutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation…8.0 High
- rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpressAutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions5.4 Medium
- quantumcloud wpbot, unknown ai chatbot for wordpress +1 moreWPBOT < 7.1.0 - Admin+ Stored XSS3.5 Low
- unknown compress & upload, eliehanna compress \& upload +1 moreCompress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload3.8 Low
- mikado themes core, mikado-themes mikado core +1 moreMikado Core <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- mikado themes wilmer coreWilmer Core <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names5.0 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal exposes 500 status when attempting login with a deleted client secret5.1 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_static_leases sub_415028 command injection6.9 Medium
- maccmsMaccms10 Database.php rep sql injection5.1 Medium
- sap se netweaverMissing Authentication check in SAP NetWeaver9.1 Critical
- sap se netweaver (rmi-p4)Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4)10.0 Critical
- sap se netweaver abap platformCross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform6.1 Medium
- sap se business one (sld)Insecure Storage of Sensitive Information in SAP Business One (SLD)8.8 High
- sap se business planning and consolidationDenial of Service (DoS) vulnerability in SAP Business Planning and Consolidation6.5 Medium
- sap se landscape transformation replication serverMissing input validation vulnerability in SAP Landscape Transformation Replication Server8.1 High
- sap se netweaver as java (adobe document service)Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)3.4 Low
- sap netweaver application server javaMissing Authentication check in SAP NetWeaver Application Server Java5.3 Medium
- sap se netweaver as java (iiop service)Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)4.3 Medium
- sap se fiori app (f4044 manage work center groups)Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)4.3 Medium
- sap se netweaver as java (deploy web service)Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)9.9 Critical
- sap supplier relationship managementCross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management6.1 Medium
- sap se netweaver application server for abap (background processing), sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing)4.3 Medium
- sap se hcm (approve timesheets fiori 2.0 application)Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)6.5 Medium
- sap se s/4hana (private cloud or on-premise)Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)8.1 High
- sap se fiori app (manage payment blocks)Missing Authorization Check in Fiori app (Manage Payment Blocks)5.4 Medium
- sap se hcm (my timesheet fiori 2.0 application)Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)3.1 Low
- sap se hcm (my timesheet fiori 2.0 application)Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)3.1 Low
- Show moreLoading…