CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +25 more +27 moreUse After Free in Automotive Software platform based on QNX7.8 High
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +35 more +37 moreUse After Free in Camera Driver7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +19 more +21 moreBuffer Over-read in Video6.1 Medium
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +111 more +113 moreImproper Validation of Array Index in Multi-Mode Call Processor9.8 Critical
- qualcomm qca6698aq firmware, qcm5430 firmware, qcm6490 firmware +30 more +32 moreBuffer Over-read in Video6.1 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +190 more +192 moreImproper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor7.8 High
- qualcomm c-v2x 9150 firmware, qam8295p firmware, qca6574au firmware +39 more +41 moreBuffer Over-read in Audio6.1 Medium
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +106 more +108 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +225 more +227 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm apq8064au firmware, aqt1000 firmware, fastconnect 6200 firmware +171 more +173 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm apq8017 firmware, apq8064au firmware, aqt1000 firmware +225 more +227 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity9.8 Critical
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +285 more +287 moreCryptographic Issues in Core7.1 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +247 more +249 moreBuffer Copy Without Checking Size of Input in HLOS7.8 High
- qualcomm qca6391 firmware, qca6698aq firmware, qcm5430 firmware +40 more +42 moreBuffer Copy Without Checking Size of Input in Computer Vision7.8 High
- pip maintainers pipFallback tar extraction in pip doesn't check symbolic links point to extraction directory5.9 Medium
- horillaHorilla vulnerable to authenticated RCE via eval() in project_bulk_archive7.2 High
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script...7.8 High
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script...7.8 High
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq...7.8 High
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where...7.8 High
- nvidia cuda toolkitNVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may...3.3 Low
- nvidia cuda toolkit, nvjpeg +1 moreNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local...4.2 Medium
- nvidia nvjpeg, cuda toolkit +1 moreNVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds...4.5 Medium
- nvidia cuda toolkit, nvjpeg +1 moreNVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local...2.5 Low
- nvidia nvjpeg, cuda toolkit +1 moreNVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read...5.7 Medium
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a...3.3 Low
- magnetism studios enduranceMagnetism Studios Endurance NSXPC com.MagnetismStudios.endurance.helper loadModuleNamed:WithReply missing authentication8.6 High
- themifyme themify builderThemify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- techspawn multiloca - woocommerce multi locations inventory managementMultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'9.8 Critical
- linux, linux kernel +1 morewifi: ath12k: fix memory leak in ath12k_service_ready_ext_event5.5 Medium
- linux, linux kernel +1 moreBluetooth: l2cap: Check encryption key size on incoming connection8.1 High
- linux, linux kernel +1 moreBluetooth: hci_core: Disable works on hci_unregister_dev7.8 High
- apache zookeeperApache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands4.3 Medium
- wago solution builderUnauthenticated User Enumeration via Missing Authentication5.3 Medium
- wago device sphere, solution builder +1 moreMissing Authentication for Database Access in Web Application9.8 Critical
- divvydrive information technologies inc. webTiming-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web4.3 Medium
- apache iotdbApache IoTDB: DoS Vulnerability7.5 High
- apache iotdbApache IoTDB: Deserialization of untrusted Data5.3 Medium
- delta electronics cncsoft-g2File Parsing Memory Corruption in CNCSoft-G27.8 High
- delta electronics cncsoft-g2File Parsing Memory Corruption in CNCSoft-G27.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and DXP does not properly expire sessions5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreA reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3...6.9 Medium
- nncpnncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving...6.4 Medium
- langfuseImproper authorization in the background migration endpoints of Langfuse 3.1 before d67b317...7.6 High
- Show moreLoading…