CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- zohocorp endpoint central, manageengine endpoint central +1 morePrivilege Escalation3.9 Low
- sistemas pleno gestão de locaçãoSistemas Pleno Gestão de Locação CPF validarCpf authorization6.9 Medium
- nuz007 smsboomnuz007 smsboom dy.php cross site scripting5.1 Medium
- saysis computer systems trade ltd. co. web portalPath Traversal in Saysis Computer Systems' Saysis Web Portal8.6 High
- nuz007 smsboomnuz007 smsboom d.php cross site scripting5.1 Medium
- yi-ge get-header-ipyi-ge get-header-ip ip.php cross site scripting5.1 Medium
- mikecen wechat-face-recognitionMikeCen WeChat-Face-Recognition wx.php valid cross site scripting5.1 Medium
- syrotech networks sy-gpon-2010-wadontUnrestricted FTP Access Vulnerability in Syrotech Router8.7 High
- nedatec consulting prevengosSQL injection vulnerability in Prevengos8.7 High
- h3c magic b3H3C Magic B3 aspForm EditMacList buffer overflow8.7 High
- topaz servcore tellerTopaz SERVCore Teller Installer SERVCoreTeller_2.0.40D.msi permission8.5 High
- statamic cms, totaljs total.js +1 moreTotal.js CMS Layout admin layouts_save cross site scripting4.8 Medium
- yordam information technology consulting education and electrical systems industry trade inc. katalogPath Traversal in Yordam BT's Yordam Katalog8.6 High
- samsung mobile retail modeImproper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute...6.6 Medium
libxsltDebianlibxslt - regression updateNo score- circl vulnerability-lookupvulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a...6.4 Medium
- kde kritaIn KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer...6.7 Medium
- flocksafety bravo compute box firmwareFlock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot...7.3 High
- flocksafety bravo compute box firmwareFlock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader...7.5 High
- flocksafety bravo compute box firmwareFlock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default...5.4 Medium
libsmb2Debianlibsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs (NextCommand),...7.5 High- totolink n600r firmwareA NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to...5.3 Medium
- No product listedAn issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote...7.5 High
- apidocjs apidoc-coreapidoc-core is vulnerable to prototype pollution7.5 High
- hutoolHutool allows remote code execution (RCE) via the QLExpressEngine class6.5 Medium
- linuxfoundation pytorchAn issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of...7.5 High
- google tensorflowAn issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set...7.5 High
- linuxfoundation pytorchA buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d,...7.5 High
- linuxfoundation pytorchA Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is...7.5 High
- google tensorflowTensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to...6.5 Medium
- linuxfoundation pytorchpytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-...5.3 Medium
- linuxfoundation pytorchA syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a...7.5 High
- linuxfoundation pytorchpytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and...7.5 High
- linuxfoundation pytorchAn issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of...7.5 High
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication...7.5 High
- linuxfoundation pytorchPyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it...5.3 Medium
- linuxfoundation pytorchIn PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds...5.3 Medium
- linuxfoundation pytorchIn PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.5.3 Medium
- linuxfoundation pytorchIn PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.5.3 Medium
- linuxfoundation pytorchIn PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.5.3 Medium
- smartbear swagger petstoreAn issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a...6.5 Medium
- smartbear swagger petstoreCross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute...6.1 Medium
- smartbear swagger petstoreAn issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE...6.5 Medium
drefnpmdref is vulnerable to prototype pollution7.5 High- lobehub lobe-chat, lobe chat +1 morelobe-chat has an Open Redirect4.3 Medium
- amd artix™ 7-series fpga, kintex™ 7-series fpga +1 moreImproper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker...8.6 High
- flagforgeFlagForgeCTF Hint Exposure via API7.5 High
- flagforgeFlagForgeCTF is Missing Authorization in main-v28.2 High
- star-citizen embedvideo, starcitizenwiki mediawiki-extensions-embedvideo +1 moreStar Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes8.6 High
- mastra-ai mastraMastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure6.5 Medium
- Show moreLoading…