CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
squidTuxCare,squid-migration-scriptTuxCare,squid-sysvinitTuxCare +2 moreUpdate of squidNo score- wavlink wl-wn578w2, wl-wn578w2 firmware +1 moreWavlink WL-WN578W2 live_online.shtml information disclosure6.9 Medium
- palo alto networks cortex xdr microsoft 365 defender packCortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials2.4 Low
- palo alto networks user-id credential agentUser-ID Credential Agent: Cleartext Exposure of Service Account password7.2 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal's selection modal is vulnerable to XSS5.1 Medium
- iteachyou dreamer cmsiteachyou Dreamer CMS updatePwd weak password2.3 Low
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 moreNFS: Fix the setting of capabilities when automounting a new filesystem7.3 High
- linux, linux kernel +1 morexfrm: Duplicate SPI Handling7.8 High
- linux, linux kernel +1 morenet: lapbether: ignore ops-locked netdevs7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 moreblock: avoid possible overflow for chunk_sectors check in blk_stack_limits()5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreARM: tegra: Use I/O memcpy to write to IRAM5.5 Medium
- linux, linux kernel +1 moreio_uring/memmap: cast nr_pages to size_t before shifting7.8 High
- linux, linux kernel +1 moredm: Always split write BIOs to zoned device limits7.8 High
- jeecg bootJeecgBoot Tenant Log Export exportLog improper authorization5.3 Medium
- evertz 3080ipx-10g, 5782xps-app-4e, 7890ixg +3 more +5 moreUnauthenticated Arbitrary Command Injection in Evertz SDVN9.3 Critical
- evertz 3080ipx-10g, 5782xps-app-4e, 7890ixg +3 more +5 moreAuthentication Bypass in Evertz SDVN9.3 Critical
- langchaingoCVE-2025-95569.8 Critical
- junkurihara httpsig-rshttpsig-rs's HMAC verification is vulnerable to timing attack5.9 Medium
- honoHono has Body Limit Middleware Bypass5.3 Medium
- dstack-tee dstackdstack has insecure LUKS2 persistent storage partitions that may be opened and used8.5 High
- jeecg bootJeecgBoot WebSocket Message sendWebSocketMsg improper authorization5.3 Medium
- kiosoft stored value unattended payment solutionSome "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers...9.1 Critical
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- zabbixSecondary-order SQL injection in Zabbix Server when deleting an autoregistered host7.5 High
- zabbixAPI hostprototype.get lists data to users with insufficient authorization.2.1 Low
- zabbixZabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.5.7 Medium
- zabbixZabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0.7.3 High
- newtype infortech nup portalNewType Infortech｜NUP Portal - Missing Authentication6.9 Medium
- newtype infortech nup portalNewType Infortech｜NUP Portal - SQL Injection9.3 Critical
- digiever ds-1200, ds-16x00-rm pro+, ds-16x00-rm uhd +15 more +17 moreDigiever｜NVR - OS Command Injection8.7 High
- digiever ds-1200, ds-16x00-rm pro+, ds-16x00-rm uhd +15 more +17 moreDigiever｜NVR - Exposure of Sensitive Information10.0 Critical
- silabs.com wi-sun stackMan in the middle (MitM) attack vulnerability in Wi-SUN library8.6 High
microcode_ctlTuxCareUpdate of microcode_ctlNo score- samsung android, mobile devices, samsung mobile devices +2 moreOut-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote...8.8 High
- samsung android, mobile devices, samsung mobile devices +2 moreOut-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote...8.8 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLab7.5 High
- gitlabServer-Side Request Forgery (SSRF) in GitLab8.5 High
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- iambriansreed contact form 7 recaptchaContact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']5.8 Medium
- unknown jquery colorboxjQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS3.5 Low
- wireless tsukamoto co., ltd. wtw-eagle app for android, wtw-eagle app for ios +1 moreWTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle...6.3 Medium
- linlinjava litemalllinlinjava litemall cancel WxAftersaleController improper authorization5.3 Medium
- aurelienlws lws cleanerLWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'7.2 High
- roncoo roncoo-payroncoo roncoo-pay list improper authentication6.9 Medium
- gitlabImproper Validation of Specified Quantity in Input in GitLab6.5 Medium
- roncoo roncoo-payroncoo roncoo-pay orderQuery direct request2.3 Low
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorization5.3 Medium
- jensg ultimate blogrollUltimate Blogroll <= 2.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- Show moreLoading…