CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- element-hq element-webIn Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left2.7 Low
- cloud jasperreports io, jasperreports library, jasperreports server +8 more +10 moreJaspersoft Library Deserialisation Vulnerability8.7 High
- matrix-org matrix-js-sdkmatrix-js-sdk has insufficient validation when considering a room to be upgraded by another2.7 Low
- ldapaccountmanager lamLAM profile editor stored cross-site scripting vulnerability4.6 Medium
- getgreenshot greenshotGreenshot — Insecure .NET deserialization via WM_COPYDATA enables local code execution8.4 High
- linux, linux kernel +1 moregenirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()5.5 Medium
- linux, linux kernel +1 morepstore/ram: Check start of empty przs during init7.8 High
- linux, linux kernel +1 morecaif: fix memory leak in cfctrl_linkup_request()5.5 Medium
- linux, linux kernel +1 moreworkqueue: fix data race with the pwq->stats[] increment4.7 Medium
- linux, linux kernel +1 morefs/ntfs3: Enhance sanity check while generating attr_list5.5 Medium
- linux, linux kernel +1 moreiommufd/selftest: Catch overflow of uptr and length5.5 Medium
- linux, linux kernel +1 morepowerpc: Don't try to copy PPR for task with NULL pt_regs5.5 Medium
- linux, linux kernel +1 moredrm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()5.5 Medium
- linux, linux kernel +1 moredrm/msm/mdp5: Don't leak some plane state5.5 Medium
- linux, linux kernel +1 moreext2/dax: Fix ext2_setsize when len is page aligned5.5 Medium
- linux, linux kernel +1 morerecordmcount: Fix memory leaks in the uwrite function5.5 Medium
- linux, linux kernel +1 moredrm/msm/dp: Free resources after unregistering them7.8 High
- linux, linux kernel +1 morewifi: ath11k: Fix SKB corruption in REO destination ring8.8 High
- linux, linux kernel +1 morefbdev/ep93xx-fb: Do not assign to struct fb_info.dev7.8 High
- linux, linux kernel +1 moremd/raid10: fix wrong setting of max_corr_read_errors5.5 Medium
- linux, linux kernel +1 morenet: fix net_dev_start_xmit trace event vs skb_transport_offset()5.5 Medium
- linux, linux kernel +1 morenilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput7.8 High
- linux, linux kernel +1 morepower: supply: axp288_fuel_gauge: Fix external_power_changed race4.7 Medium
- linux, linux kernel +1 morenet: fec: Better handle pm_runtime_get() failing in .remove()7.8 High
- linux, linux kernel +1 morerbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails7.8 High
- linux, linux kernel +1 morefsdax: force clear dirty mark if CoW5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free8.8 High
- linux, linux kernel +1 morenet: hns: fix possible memory leak in hnae_ae_register()5.5 Medium
- linux, linux kernel +1 moremisc: tifm: fix possible memory leak in tifm_7xx1_switch_media()5.5 Medium
- linux, linux kernel +1 morerapidio: fix possible name leaks when rio_add_device() fails5.5 Medium
- linux, linux kernel +1 moremedia: vimc: Fix wrong function called when vimc_init() fails5.5 Medium
- linux, linux kernel +1 moreBluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()7.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has unchecked input for loop condition vulnerability in XML-RPC6.9 Medium
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreWAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode2.1 Low
- spring cloud gatewaySpring Expression Language property modification using Spring Cloud Gateway Server WebFlux10.0 Critical
- pspete pspaspsPAS does not enforce TLS 1.2 within Get-PASSAMLResponse2.3 Low
- ibm aix, vios +1 moreIBM AIX privilege escalation7.4 High
- talkative ircTalkative IRC v0.4.4.16 Response Buffer Overflow9.3 Critical
- oscommerceosCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution9.3 Critical
- intersystems corporation cachéInterSystems Caché UtilConfigHome.csp Stack Buffer Overflow9.3 Critical
- e1 informatics web applicationSQLi in E1 Informatics' Web Application8.6 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 morePDF File Parsing Heap-Based Buffer Overflow Vulnerability7.8 High
- executeautomation mcp-database-server, mcp database server +1 more@executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode8.1 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 morePDF File Parsing Out-of-Bounds Write Vulnerability7.8 High
- arma store armalifeSQLi in Arma Store's Armalife9.8 Critical
- patika global technologies humansuiteIDOR in Patika Global Technologies' HumanSuite6.5 Medium
- patika global technologies humansuiteHTML Injection in Patika Global Technologies' HumanSuite4.3 Medium
- holistic it, consultancy coop. workcube erpReflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP5.3 Medium
- linux, linux kernel +1 moreefi: stmm: Fix incorrect buffer allocation method7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morexfs: do not propagate ENODATA disk errors into xattr code7.8 High
- Show moreLoading…