CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- microsoft omniparserOmniParser Remote Code Execution Vulnerability7.3 High
- srmorete adb-mcp, adb mcp server +1 moreCommand Injection in adb-mcp MCP Server9.8 Critical
- anthropic claude code, anthropics claude-code +1 moreClaude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions7.7 High
- siderolabs omniOmni Wireguard SideroLink potential escape0.5 Low
- llamastack llama stackLlama Stack could potentially allow for remote code execution5.3 Medium
- horillaHorilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover7.7 High
- horillaHorilla Stored XSS Vulnerability via File Upload in Reimbursement Panel7.7 High
- totolink x6000r, x6000r firmware +1 moreTOTOLINK X6000R Security Bypass Vulnerability7.3 High
- cisco ios xe softwareA vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level...6.7 Medium
- totolink x6000r, x6000r firmware +1 moreTOTOLINK X6000R Command Injection Vulnerability9.3 Critical
- mafintosh tar-fstar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball8.7 High
- drupal reverse proxy header, reverse proxy header project proxy header +1 moreReverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-1115.3 Medium
- 2bits currencyCurrency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-1104.3 Medium
- drupal umami analytics, umami analytics +1 moreUmami Analytics - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-1093.8 Low
- access code project code, drupal access code +1 moreAccess code - Moderately critical - Access bypass - SA-CONTRIB-2025-1086.3 Medium
- horillaHorilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Modules4.8 Medium
- drupal plausible tracking, plausible tracking project tracking +1 morePlausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-1076.1 Medium
- horillaHorilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control7.5 High
- cisco ios xe softwareA vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco...5.3 Medium
- drupal json field, json field project field +1 moreJSON Field - Critical - Cross Site Scripting - SA-CONTRIB-2025-1066.1 Medium
- cisco ios xe softwareA vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series...5.3 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker...6.0 Medium
- cisco ios xe softwareA vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote...6.1 Medium
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an...6.5 Medium
- cisco ios xe software, ios xe +1 moreMultiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker...6.7 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst...7.4 High
- cisco iosA vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker...7.7 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE...7.7 High
- cisco ios xe software, ios, ios xe +3 more +5 moreA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS...8.1 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE...8.6 High
- cisco ios xe softwareA vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker...8.8 High
- cisco sd-wan vedge cloud, sd-wan vedge router +1 moreCisco SD-WAN vEdge Software Access Control List Bypass Vulnerability5.8 Medium
- cisco aironet access point software (ios xe controller)A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point...4.3 Medium
- cisco aironet access point software (ios xe controller)A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point ...4.3 Medium
- mangati novosgaMangati NovoSGA SVG File admin cross site scripting4.8 Medium
- google chromeInteger overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to...8.8 High
- google chromeSide-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote...9.1 Critical
- perforce puppet enterpriseInsufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.56.9 Medium
- qualcomm fastconnect 7800 firmware, qam8255p firmware, qam8775p firmware +36 more +38 moreRelease of Invalid Pointer or Reference in Android Core7.8 High
- qualcomm fastconnect 7800 firmware, immersive home 3210 platform firmware, immersive home 326 platform firmware +65 more +67 moreBuffer Over-read in WLAN HAL7.5 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +39 more +41 moreUse After Free in Camera7.8 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6900 firmware +118 more +120 moreBuffer Over-read in WLAN HAL7.5 High
- qualcomm apq8017 firmware, apq8064au firmware, aqt1000 firmware +201 more +203 moreBuffer Over-read in BT Controller7.5 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 7800 firmware +51 more +53 moreBuffer Over-read in BT Controller7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +27 more +29 moreDouble Free in Video7.8 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +25 more +27 moreUse After Free in Automotive Software platform based on QNX7.8 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +28 more +30 moreImproper Input Validation in Automotive Software platform based on QNX7.8 High
- Show moreLoading…