CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure SSH Client Configuration7.9 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Installation Credentials10.0 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Build Pipeline8.7 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded GPG Private Key9.4 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys9.2 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Exposed Internal Docker Instance10.0 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Blind SSRF via Lexmark dellCheck.php6.9 Medium
- dell repository manager (drm), repository manager +1 moreDell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of...7.5 High
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_id5.1 Medium
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health CSV injection6.3 Medium
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health arbitrary file upload6.2 Medium
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health includes session token in debug output4.6 Medium
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health cross site request forgery8.6 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password9.3 Critical
- vmware nsxUsername enumeration vulnerability7.5 High
- vmware nsxWeak password recovery vulnerability8.1 High
- esri portal for arcgisBUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)4.8 Medium
- esri portal for arcgisBUG-000174150 - Unvalidated redirect in Portal for ArcGIS.6.1 Medium
- esri portal for arcgisBUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.4.8 Medium
- esri portal for arcgisBUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS. (11.3, 11.1, 10.9.1)4.8 Medium
- esri portal for arcgisBUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.4.8 Medium
- esri portal for arcgisReflected XSS vulnerability in Portal for ArcGIS.4.8 Medium
- esri portal for arcgisBUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.6.1 Medium
- esri portal for arcgisBUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.6.1 Medium
- esri portal for arcgisStored XSS vulnerability in Portal for ArcGIS4.8 Medium
- ibm websphere application serverIBM WebSphere Application Server denial of service4.9 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...6.3 Medium
- minio minio-javaminio-java Client XML Tag is Vulnerable to Value Substitution8.7 High
j178/prek-actionGitHub Actionsj178/prek-action vulnerable to arbitrary code injection in composite action9.9 Critical- vmware vcenter, cloud foundation, telco cloud infrastructure +2 more +4 moreHeader injection vulnerability8.5 High
- danny-avila danny-avila/librechat, librechat +1 moreMass Assignment in danny-avila/librechat4.3 Medium
- mondeja mkdocs-include-markdown-pluginmkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders6.5 Medium
- pebcak go-mailgo-mail has insufficient address encoding when passing mail addresses to the SMTP client8.2 High
- safedep vetvet MCP Server SSE Transport DNS Rebinding Vulnerability2.1 Low
- vmware aria operations, cloud foundation, telco cloud infrastructure +1 more +3 moreVMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)4.9 Medium
- vmware toolsImproper authorisation vulnerability7.6 High
- sato s86-ex 203dpiWEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION6.8 Medium
- ibm license metric toolIBM License Metric Tool bypass security4.3 Medium
- ibm license metric toolIBM License Metric Tool cross-site scripting6.4 Medium
- fayton software and consulting services fayton.pro erpSQLi in Fayton Software's fayton.pro ERP9.8 Critical
- civetwebDenial of Service in CivetWeb8.7 High
- chef automate, progress software chef automate +1 moreChef Automate compliance service SQL Injection Vulnerability9.8 Critical
- chef automate, progress software chef automate +1 moreChef Automate SQL Injection Vulnerability8.8 High
curlUbuntucurl regressionNo score- apt-cacher-ngReflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG5.1 Medium
- apt-cacher-ngReflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG5.1 Medium
- codecanyon perfex crm, perfex crm crm +1 moreHTML injection in Perfex CRM5.3 Medium
- codecanyon perfex crm, perfex crm crm +1 moreHTML injection in Perfex CRM5.3 Medium
- codecanyon perfex crm, perfex crm crm +1 moreHTML injection in Perfex CRM5.3 Medium
- Show moreLoading…