CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- zephyrproject zephyrBluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests7.1 High
- zephyrproject zephyrBluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values7.6 High
- zephyrproject zephyrBluetooth: bt_conn_tx_processor unsafe handling7.6 High
- zephyrproject zephyrBluetooth: Out-Of-Context le_conn_rsp Handling4.3 Medium
- aonetheme service finder sms systemService Finder SMS System <= 2.0.0 - Authentication Bypass8.1 High
- codename065 download managerDownload Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter6.1 Medium
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation5.4 Medium
- bearsthemes goza - nonprofit charity wordpress themeGoza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation9.8 Critical
- smci mbd-x12stwSupermicro BMC firmware update validation bypass7.2 High
- smci x13sem-fSupermicro BMC firmware update validation bypass7.2 High
wolfsslOSS-FuzzUse-of-uninitialized-value in fuzzer_sendNo score- digitalocean @digitalocean/do-markdownit, do-markdownit +1 more@digitalocean/do-markdownit has Type Confusion vulnerability5.4 Medium
- smseagleSMSEagle before 6.11 allows reflected XSS via a username or contact phone number.4.8 Medium
- internet2 grouperIn Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can...6.5 Medium
- grokability, inc. snipe-itSnipe-IT allows unsafe deserialization6.8 Medium
- grokability, inc. snipe-itSnipe-IT allows XSS6.4 Medium
- libraesva email security gatewayLibraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail...6.1 Medium
- accela automation platformAccela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script...9.1 Critical
- tenda ac6 firmwareAn issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to...7.7 High
- tandoor recipesTandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation....6.5 Medium
- tenda ac6 firmwareTenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the...6.5 Medium
- sync-in serverDirectory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers...5.3 Medium
- paracrawl keopsParacrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.6.1 Medium
- cmseasyCMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.6.3 Medium
- yandaozi ppressServer-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute...8.8 High
- yandaozi ppressAn issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via...8.0 High
- yandaozi ppressHardcoded credentials in default configuration of PPress 0.0.9.8.8 High
- centos-webpanel centos web panel, cwp control web panel, control-webpanel webpanel +2 moreCWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote...9.0 Critical
- google chrome, chromium v8, siemens cadra +2 moreType confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to...9.8 Critical
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to...8.8 High
- google chromeUse after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to...8.8 High
- oracle opengrokOpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross...6.1 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreDeserialization Vulnerability in GoAnywhere MFT's License Servlet10.0 Critical
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security8.6 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay8.6 High
- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information8.6 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource7.2 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource7.2 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts6.9 Medium
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions6.9 Medium
- cognex in-sight 2000 series, in-sight 7000 series, in-sight 8000 series +2 more +4 moreAn adjacent attacker without authentication can exploit this vulnerability to retrieve a set of...8.6 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password8.6 High
- dover fueling solutions progauge maglink lx 4, progauge maglink lx plus, progauge maglink lx ultimate +2 moreDover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials9.3 Critical
- dover fueling solutions progauge maglink lx 4, progauge maglink lx plus, progauge maglink lx ultimate +2 moreDover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key9.3 Critical
- dover fueling solutions progauge maglink lx 4, progauge maglink lx plus, progauge maglink lx ultimate +2 moreDover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound8.8 High
- d-link dir-645, dlink dir-645 firmware +1 moreD-Link DIR-645 soap.cgi soapcgi_main command injection5.3 Medium
- Show moreLoading…