CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- saleorSaleor has user enumeration vulnerability due to different error messages5.3 Medium
- osc ondemandOpen OnDemand didn't rotate password for VNC batch_connect4.1 Medium
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting4.8 Medium
- knadh listmonklistmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover8.6 High
- ibm jazz for service managementIBM Jazz for Service Management information disclosure4.3 Medium
- ibm hardware management consoleIBM Hardware Management Console - Power Systems cross-site scripting6.4 Medium
- octoprintOctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload7.5 High
- crestron touchscreens x60, x70 seriesRECWAVE Filepath Traversal6.8 Medium
- corednsCoreDNS: DNS Cache Pinning via etcd Lease ID Confusion7.1 High
- baicells eg7035e-m11CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')6.1 Medium
- baicells nova430e/430i, nova436q, neutrino430, nova846CWE-328: Use of Weak Hash6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal exposes ERC which can lead to exploit the time response attack6.9 Medium
- baicells neutrino430, nova436q, nova430e/430i, nova846, nova246, nova243, nova233, nova227CWE-200 Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- baicells nova430e/430i, nova436q, neutrino430, nova846CWE-1392: Use of Default Credentials10.0 Critical
- baicells nova430e/430i, nova436q, neutrino430, nova846CWE-1242: Inclusion of Undocumented Features9.8 Critical
- xwikisas xwiki-pro-macrosXWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro10.0 Critical
- baicells neutrino430Use of Default Cryptographic Key (CWE-1394)9.1 Critical
- xwikisas xwiki-pro-macrosXWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro10.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to XSS attack through its search bar portlet5.3 Medium
- baicells neutrino430, nova436q, nova430e/430i, nova846, nova246, nova243, nova233, nova227Multiple CWE-789.8 Critical
- baicells spectra lte-u enbCWE-798 Use of Hard-coded Credentials8.4 High
- xwiki pro macros, xwikisas xwiki-pro-macros +1 moreXWiki Remote Macros vulnerable to remote code execution using the panel macro10.0 Critical
- lmsys sglanglmsys sglang update_weights_from_tensor main deserialization6.9 Medium
- xwiki pro macros, xwikisas xwiki-pro-macros +1 moreXWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro10.0 Critical
- adobe premiere proPremiere Pro | Use After Free (CWE-416)7.8 High
- adobe dreamweaver, dreamweaver desktop +1 moreDreamweaver Desktop | Cross-Site Request Forgery (CSRF) (CWE-352)8.6 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal is vulnerable to XSS attacks via its remote app title field4.6 Medium
- lizardbyte sunshine, sunshine for windows +1 moreLizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability7.8 High
- lexmark cx, xc, cs, ms, mx, xm, et. al.Server-Side Request Forgery (SSRF) vulnerability found in embedded web server6.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows SMB Elevation of Privilege Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreMicrosoft SQL Server Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Hyper-V Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMapUrlToZone Security Feature Bypass Vulnerability4.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows BitLocker Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows BitLocker Elevation of Privilege Vulnerability7.3 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft excel, office, 365 apps +8 more +10 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows MultiPoint Services Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Hyper-V Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreMicrosoft Virtual Hard Disk Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreCapability Access Management Service (camsvc) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMapUrlToZone Security Feature Bypass Vulnerability4.3 Medium
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +12 more +14 moreWindows Management Service Elevation of Privilege Vulnerability7.4 High
- Show moreLoading…