CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- linux, linux kernel +1 morenet/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow5.5 Medium
- linux, linux kernel +1 moremISDN: hfcpci: Fix warning when deleting uninitialized timer5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix lockdep assertion on sync reset unload event5.5 Medium
- linux, linux kernel +1 morefbnic: Move phylink resume out of service_task and into open/close5.5 Medium
- linux, linux kernel +1 morenet/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path5.5 Medium
- linux, linux kernel +1 moretrace/fgraph: Fix the warning caused by missing unregister notifier5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreatm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morenet: rose: include node references in rose_neigh refcount8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morenet: rose: convert 'use' field to refcount_t8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreHID: asus: fix UAF via HID_CLAIMED_INPUT validation7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreKVM: x86: use array_index_nospec with indices that come from guest7.8 High
- linux, linux kernel +1 moreio_uring/kbuf: fix signedness in this_len calculation5.5 Medium
- linux, linux kernel +1 moreperf: Avoid undefined behavior from stopping/starting inactive events7.8 High
- linux, linux kernel +1 moredrm/msm/dpu: Add a null ptr check for dpu_encoder_needs_modeset5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 morefs/smb: Fix inconsistent refcnt update5.5 Medium
- linux, linux kernel +1 moreHID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreefivarfs: Fix slab-out-of-bounds in efivarfs_d_compare7.1 High
- linux, linux kernel +1 moreio_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths5.5 Medium
- linux, linux kernel +1 moreRISC-V: KVM: fix stack overrun when loading vlenb7.8 High
- linux, linux kernel +1 moreice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreftrace: Fix potential warning in trace_printk_seq during ftrace_dump4.7 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moresctp: initialize more fields in sctp_v6_from_sk()5.5 Medium
- linux, linux kernel +1 moredrm/xe/vm: Clear the scratch_pt pointer on error5.5 Medium
- linux, linux kernel +1 morebnxt_en: Fix memory corruption when FW resources change during ifdown7.8 High
- linux, linux kernel +1 moreHID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length8.4 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreHID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()5.5 Medium
- linux, linux kernel +1 moredrm/mediatek: Add error handling for old state CRTC in atomic_disable5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreHID: multitouch: fix slab out-of-bounds access in mt_report_fixup()8.8 High
- linux, linux kernel +1 morenet: macb: fix unregister_netdev call order in macb_remove()5.5 Medium
- beefull energy technologies appIDOR in Beefull Energy Technologies' Beefull App6.5 Medium
- mozilla focus for ios, firefox focus +1 moreOpening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites6.5 Medium
- mozilla firefoxInformation disclosure, mitigation bypass in the Privacy component in Firefox for Android7.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the Site Permissions component8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Web Compatibility: Tooling component5.4 Medium
- mozilla firefox, thunderbird +1 moreSpoofing issue in the WebAuthn component in Firefox for Android6.5 Medium
- bmc control-m/agentBMC Control-M/Agent memory corruption in SSL/TLS communication8.4 High
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent buffer overflow in SSL/TLS communication6.3 Medium
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent buffer overflow local privilege escalation9.3 Critical
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent path traversal local privilege escalation9.3 Critical
- bmc control-m/agentBMC Control-M/Agent improper IP address filtering order6.9 Medium
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent unescaped NULL byte in access control list checks9.5 Critical
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent hardcoded Blowfish keys7.6 High
- ppc technologies xpon ont (optical network terminal) 2k15xCross-Site Scripting (XSS) Vulnerability in PPC XPON ONT Wi-Fi Router5.1 Medium
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent insecure default file permissions5.7 Medium
- bmc control-m/agentBMC Control-M/Agent hardcoded default keystore password5.7 Medium
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent default SSL/TLS configuration authenticated bypass9.5 Critical
- dolusoft omaspotSensitive Data Exposure in Dolusoft's Omaspot9.6 Critical
- dolusoft omaspotSQLi in Dolusoft's Omaspot9.8 Critical
- dolusoft omaspotXSS in Dolusoft's Omaspot5.4 Medium
- megatek communication system azora wireless network managementSQLi in Megatek Communication System's Azora Wireless Network Management8.8 High
- Show moreLoading…