CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- opsmill infrahubInfrahub allows authentication with deleted and expired API tokens5.5 Medium
- zoom communications, inc workplace vdi plugin macos universal installer for vmware horizonZoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition6.6 Medium
- zoom communications, inc workplace clients for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Workplace Clients for Windows - Improper Action Enforcement5.3 Medium
- zoom communications, inc workplace clients for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Workplace Clients for Windows - Incorrect Authorization4.3 Medium
- zoom workplace, zoom communications inc. workplace clients, zoom meeting software development kit +4 more +6 moreZoom Workplace Clients - Cross-site Scripting4.3 Medium
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Use After Free (CWE-416)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Read (CWE-125)7.8 High
- zoom workplace, zoom communications inc. workplace clients, zoom meeting software development kit +4 more +6 moreZoom Workplace Clients - Argument Injection4.3 Medium
- utt 1250gw, 1250gw firmware +1 moreUTT 1250GW formConfigApConfTemp sub_453DC buffer overflow8.7 High
- zoom communications, inc workplace for windows on armZoom Workplace for Windows on ARM - Missing Authorization7.8 High
- zoom communications inc. workplace clients, zoom meeting software development kit, rooms +3 more +5 moreZoom Workplace Clients - Buffer Overflow6.5 Medium
- schneider electric saitel dp rtu, saitel dr rtu +1 moreCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'...5.8 Medium
- schneider electric saitel dp rtu, saitel dr rtu +1 moreCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'...5.8 Medium
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Out-of-bounds Write (CWE-787)7.8 High
- opexus foiaxpress public access link (pal), opexustech foiaxpress public access link +1 moreOPEXUS FOIAXpress PAL SQL injection9.3 Critical
- nvidia nvdebug, nvdebug tool +1 moreThe NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the...7.3 High
- nvidia nvdebug, nvdebug tool +1 moreThe NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to...7.6 High
- nvidia nvdebug, nvdebug tool +1 moreThe NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a...8.2 High
- utt 1200gw, 1200gw firmware +1 moreUTT 1200GW formApLbConfig sub_4B48F8 buffer overflow8.7 High
- schneider electric ats490 altivar soft starter, atv340e altivar machine drives, atv6000 medium voltage altivar process drives +5 more +7 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...5.3 Medium
- utt 1200gw, 1200gw firmware +1 moreUTT 1200GW ConfigWirelessBase buffer overflow8.7 High
- sophos ap6 series wireless access pointsAn authentication bypass vulnerability allows remote attackers to gain administrative privileges...9.8 Critical
- adobe after effectsAfter Effects | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe after effectsAfter Effects | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe after effectsAfter Effects | Out-of-bounds Read (CWE-125)5.5 Medium
- calix gigacenter ontCalix Gigacenter ONT - Command Injection8.5 High
- hp poly lens desktop, hp, inc. poly lens +1 morePoly Lens Desktop Application – Privilege Escalation7.3 High
- calix gigacenter ontCalix GigaCenter ONT firmware - Sensitive Information Disclosure5.1 Medium
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting5.1 Medium
- thinkinai deepchatDeepChat's Mermaid rendering has XSS leading to RCE9.7 Critical
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting5.1 Medium
- webrecorder wabac.jswabac.js has XSS vulnerability in 404 error handling logic7.1 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure5.3 Medium
- tautulliTautulli vulnerable to Authenticated Remote Code Execution via Command Injection8.1 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Violation of Secure Design Principles (CWE-657)4.0 Medium
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting5.1 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- calix gigacenter ontCalix GigaCenter ONT - Unauthenticated Telnet8.7 High
- tautulliTautulli vulnerable to Authenticated Remote Code Execution via write primitive and `Script` notification agent9.1 Critical
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting5.1 Medium
- calix gigacenter ontCalix GigaCenter ONT (Broadcom SoC) - Excessive Privileges7.0 High
- tautulliTautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`8.6 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure5.3 Medium
- tautulliTautulli vulnerable to Unauthenticated Path Traversal in `/image` endpoint8.6 High
- calix gigacenter ontCalix GigaCenter ONT (Quantenna SoC) - Excessive Privileges7.0 High
- datahihi1 tinyenv, tiny-env +1 moreTinyEnv: Inline comments not stripped properly in .env values5.1 Medium
- datahihi1 tinyenv, tiny-env +1 moreTinyEnv: Missing .env file not required — may cause unexpected behavior5.1 Medium
- Show moreLoading…