CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
docker-clientOSS-FuzzSecurity exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBufferNo scorevlcOSS-FuzzGlobal-buffer-overflow in Ogg_CreateESNo score- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource6.9 Medium
- hp inc. hyperx ngenuity, hyperx ngenuity +1 moreHyperX NGENUITY - Arbitrary Code Execution5.2 Medium
- mattermost, mattermost server +1 moreIDOR in board file download allows any user to download any file by UUID3.1 Low
- mapserverMapServer - WFS XML Filter Query SQL injection8.9 High
- mattermost, mattermost server +1 moreAdmin RCE via prepackaged plugins by way of misconfigured imports directory8.0 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Cross-Site Request Forgery (CSRF) vulnerability5.1 Medium
- general bytes crypto application server (cas)General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin Page9.3 Critical
- microworld technologies escan avMicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates9.3 Critical
- netapp storagegridCVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)5.4 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink Follow8.5 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD_PRELOAD Hooking8.5 High
- netapp storagegridCVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)5.3 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE9.3 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Contacts Center widget has insecure direct object reference6.9 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN8.7 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking6.9 Medium
- vasion virtual appliance host, print application (saas/va), print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes7.1 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances8.5 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions8.4 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling8.5 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext8.6 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances8.7 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo8.6 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe8.6 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components9.3 Critical
- netapp storagegridCVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)7.5 High
- netapp storagegridCVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)6.4 Medium
- sktlab mukbee appSKTLab Mukbee App com.dw.android.mukbee AndroidManifest.xml improper export of android application components4.8 Medium
- webull investing & trading appWebull Investing & Trading App AndroidManifest.xml improper export of android application components4.8 Medium
- openai codexCodex has sandbox bypass due to bug in path configuration logic8.6 High
- ibm copy services managerIBM Copy Services Manager cross-site scripting6.1 Medium
- ooma office business phone appOoma Office Business Phone App com.ooma.office2 improper export of android application components4.8 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morefs: writeback: fix use-after-free in __mark_inode_dirty()7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 moretee: fix NULL pointer dereference in tee_shm_put5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morewifi: cfg80211: fix use-after-free in cmp_bss()8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work7.8 High
- linux, linux kernel +1 morewifi: mt76: mt7915: fix list corruption after hardware restart8.8 High
- linux, linux kernel +1 moreBluetooth: vhci: Prevent use-after-free by removing debugfs files early7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 moreBluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()8.0 High
- linux, linux kernel +1 moreptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog7.8 High
- linux, linux kernel +1 moreeth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 morenet/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()7.5 High
- linux, linux kernel +1 morenet: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndev5.5 Medium
- linux, linux kernel +1 moreice: fix NULL access of tx->in_use in ice_ptp_ts_irq7.8 High
- Show moreLoading…