CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- linux, linux kernel +1 moreice: fix NULL access of tx->in_use in ice_ll_ts_intr7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morei40e: Fix potential invalid access when MAC list is empty7.1 High
- linux, linux kernel +1 morenet/tcp: Fix socket memory leak in TCP-AO failure handling for IPv65.5 Medium
- linux, linux kernel +1 morevxlan: Fix NPD when refreshing an FDB entry with a nexthop object7.5 High
- linux, linux kernel +1 morevxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 morewifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreax25: properly unshare skbs in ax25_kiss_rcv()8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreppp: fix memory leak in pad_compress_skb5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morepcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morex86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremm: move page table sync declarations to linux/pgtable.h5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremm: slub: avoid wake up kswapd in set_track_prepare5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreocfs2: prevent release journal inode after journal shutdown5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morescsi: lpfc: Fix buffer free/clear order in deferred receive path9.8 Critical
- linux, linux kernel +1 moreaudit: fix out-of-bounds read in audit_compare_dname_path()7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morebatman-adv: fix OOB read/write in network-coding decode8.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morecifs: prevent NULL pointer dereference in UTF16 conversion5.5 Medium
- linux, linux kernel +1 moreplatform/x86: asus-wmi: Fix racy registrations7.8 High
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 moreUpdate of kernelNo score- aliasvaultAliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction7.7 High
- saysis computer systems trade ltd. co. starcities e-municipality managementXSS in Saysis Computer Systems' StarCities6.3 Medium
- intsig camscanner appintsig CamScanner App com.intsig.camscanner AndroidManifest.xml improper export of android application components4.8 Medium
- creality cloud appCreality Cloud App com.cxsw.sdprinter AndroidManifest.xml improper export of android application components4.8 Medium
- bimser solution software trade inc. eba document and workflow management systemIDOR in Bimser's eBA Document and Workflow Management System6.4 Medium
- apeuni pte exam practice appAPEUni PTE Exam Practice App com.ape_edication AndroidManifest.xml improper export of android application components4.8 Medium
- No product listed07FLYCMS/07FLY-CMS/07FlyCRM login sql injection6.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:CognitiveProcessDesigner5.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:BlueSpiceWhoIsOnline5.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:BlueSpiceAvatars5.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:AtMentions5.9 Medium
- No product listed07FLYCMS/07FLY-CMS/07FlyCRM Login cross site scripting5.3 Medium
- No product listed07FLYCMS/07FLY-CMS/07FlyCRM index.php cross site scripting5.3 Medium
- cyberlord92 miniorange otp verification with firebaseMiniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation8.1 High
- four-faith water conservancy informatization platform, water conservancy informatization +1 moreFour-Faith Water Conservancy Informatization Platform historyDownload.do;otheruserLogin.do;getfile path traversal6.9 Medium
- four-faith water conservancy informatization platform, water conservancy informatization +1 moreFour-Faith Water Conservancy Informatization Platform historyDownload.do;usrlogout.do path traversal6.9 Medium
- jeecg bootJeecgBoot sendMsg improper authorization5.3 Medium
- vizly web design real estate packagesReflected XSS in Vizly Web Design's Real Estate Packages7.1 High
- beyaz bilgisayar software design industry and trade ltd. co. cityplusPath Traversal in Beyaz Computer's CityPLus7.5 High
linux-oracle-6.8Ubuntulinux-oracle-6.8 vulnerabilityNo score- wisdomgarden tronclassWisdomGarden｜Tronclass - Insecure Direct Object Reference5.3 Medium
linux-realtimeUbuntulinux-realtime vulnerabilityNo score- grafana grafana-zabbix-pluginRegex DoS in Grafana Zabbix Plugin4.3 Medium
- mitsubishi electric corporation melsec-q series q03udvcpu, melsec-q series q04udpvcpu, melsec-q series q04udvcpu +6 more +8 moreImproper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric...6.8 Medium
linux-ibmUbuntu,linux-ibm-6.8Ubuntu,linux-nvidiaUbuntu +3 more +5 morelinux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilityNo scorelinuxUbuntu,linux-awsUbuntu,linux-gcpUbuntu +6 more +8 morelinux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilityNo score- salzano embed pdf for wpformsEmbed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- google kerasArbitary Code execution in Keras load_model()7.3 High
- google kerasArbitrary Code execution in Keras Safe Mode8.6 High
- pusula communication information internet industry and trade ltd. co. manageable email sending systemOpen Redirect in PUSULA's Manageable Email Sending System4.7 Medium
- aonetheme service finder bookingsService Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business9.8 Critical
- Show moreLoading…