CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- lazyagi lazyllmLazyAGI LazyLLM server.py lazyllm_call deserialization5.3 Medium
- dell wireless 5932e, latitude 5350 firmware, latitude 5550 firmware +12 more +14 moreDell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3...7.8 High
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 firewall.cgi sub_401B30 command injection5.3 Medium
- zenitel tcis-3+Authenticated Remote Code Execution in zForm_auto_config8.4 High
- zenitel icx500, icx510 +1 moreAuthenticated Union based SQL-injection in the search input field7.3 High
- zenitel icx500, icx510 +1 moreAuthenticated Remote Code Execution in the Billing Administration portal8.4 High
- zenitel icx500, icx510 +1 moreUnauthenticated SQL-injection in password field8.8 High
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 firewall.cgi sub_4016F0 command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 SetName wireless.cgi sub_403198 command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injection5.1 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 DeleteMac wireless.cgi sub_402D1C command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 firewall.cgi sub_401778 command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 AddMac wireless.cgi sub_403010 command injection5.3 Medium
- nagios xiNagios XI < 2026R1 Configuration Wizard Authenticated Command Injection8.6 High
- dingtian dt-r002, dingtian-tech dt-r002 firmware +1 moreInsufficiently Protected Credentials in Dingtian DT-R0028.7 High
- dingtian dt-r002, dingtian-tech dt-r002 firmware +1 moreInsufficiently Protected Credentials in Dingtian DT-R0028.7 High
- cisco adaptive security appliance (asa) software, ios xe software, ios xr software +6 more +8 moreA vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA)...9.0 Critical
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 moreA vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA)...6.5 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 moreA vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA)...9.9 Critical
- utt 1200gw, 1250gw, 1200gw firmware +1 more +3 moreUTT 1200GW/1250GW formApMail buffer overflow8.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"4.8 Medium
- geyang ml-loggergeyang ml-logger File server.py stream_handler information disclosure6.9 Medium
- dell cloud disaster recoveryDell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of...6.7 Medium
- dell bsafe crypto-jDell Crypto-J generates an error message that includes sensitive information about its...5.9 Medium
- flagforgeFlagForgeCTF's Improper Session Handling Allows Access After Logout9.8 Critical
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvt5.5 Medium
- ibm watson studio on cloud pak for data, watson studio +1 moreIBM Watson Studio on Cloud Pak for Data cross-site scripting4.4 Medium
- dell bsafe micro edition suite, bsafe micro-edition-suite +1 moreDell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write...7.5 High
- geyang ml-loggergeyang ml-logger server.py log_handler path traversal6.9 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive...4.0 Medium
- ericsson indoor connect 8855, indoor connect 8855 firmware +1 moreEricsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability5.1 Medium
- ericsson indoor connect 8855, indoor connect 8855 firmware +1 moreEricsson Indoor Connect 8855 - Missing Authorization Vulnerability8.7 High
- monkeytypeMonkeytype Vulnerable to Self-XSS on loading saved custom text2.4 Low
- ericsson indoor connect 8855, indoor connect 8855 firmware +1 moreEricsson Indoor Connect 8855 - Improper Input Validation Vulnerability8.7 High
- rob--w / cors-anywhere / cors-anywhereRob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF9.5 Critical
- horillaHorrila Stored XSS Vulnerability via Ticket Comment section9.9 Critical
- ericsson indoor connect 8855, indoor connect 8855 firmware +1 moreEricsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability8.5 High
- rapid7 appspider proRapid7 Appspider Broken Access Control Vulnerability3.3 Low
- rackRack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters7.5 High
- imonitor software inc. eamInsecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM9.8 Critical
- geyang ml-loggergeyang ml-logger Ping server.py log_handler deserialization5.3 Medium
- changsha developer technology iview editorChangsha Developer Technology iView Editor Markdown cross site scripting4.8 Medium
- imonitor software inc. eamLocal Privilege Escalation via Insecure Update Mechanism in iMonitor EAM7.8 High
- gardener gardener-extension-provider-awsGardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning9.9 Critical
- imonitor software inc. eamUnencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM6.5 Medium
- mikrotik routerosMikroTik RouterOS libjson.so print parse_json_element buffer overflow8.7 High
- ericsson indoor connect 8855, indoor connect 8855 firmware +1 moreEricsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability8.7 High
- proliz computer software hardware service trade ltd. co. obs (student affairs information system)Stored XSS in Proliz Software's OBS8.9 High
- langgenius difyDify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others6.0 Medium
- Show moreLoading…