CVEs published September 2, 2025
138 CVEs were published on September 2, 2025: 10 critical, 63 high.
- Published
- 138
- Critical
- 10
- High
- 63
- Medium
- 56
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 31
Most affected products
- Google Android
- 25
- Copeland LP E3 Supervisory Control
- 9
- Foxit PDF Reader
- 8
- Digilent DASYLab
- 6
- Akinsoft OctoCloud
- 4
- PHPGurukul Beauty Parlour Management System
- 4
- itsourcecode Student Information Management System
- 3
- Realtek rtl81xx SDK
- 3
- Akinsoft ProKuafor
- 2
- Anritsu ShockLine
- 2
Critical 10
- CVE-2025-26416In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-22435In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion.Google Android
- CVE-2025-22429In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code.Google Android
- CVE-2025-9276Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass VulnerabilityCockroach Labs cockroach-k8s-request-cert
- CVE-2025-9696Use of Hard-coded Credentials in SunPower PVS6SunPower PVS6
- CVE-2025-52551Proprietary protocol allows for unauthenticated file operationsCopeland LP E2 Facility Management System
- CVE-2025-52549Predictable root linux password generationCopeland LP E3 Supervisory Control
- CVE-2025-6519Consistent predictable generation of the password for the default admin user "ONEDAY" to the application servicesCopeland LP E3 Supervisory Control
- CVE-2025-5662Deserialization Vulnerability in h2oai/h2o-3h2oai/h2o-3
- CVE-2025-57140rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path.
High 63
- CVE-2025-54588Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faultsenvoyproxy envoy · github.com/envoyproxy/envoy
- CVE-2025-22442In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created Google Android
- CVE-2025-22439In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing perGoogle Android
- CVE-2025-22438In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free.Google Android
- CVE-2025-22437In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in Google Android
- CVE-2025-22434In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code.Google Android
- CVE-2025-22433In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work ProfGoogle Android
- CVE-2025-22428In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user frGoogle Android
- CVE-2025-22427In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due tGoogle Android
- CVE-2025-22423In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check.Google Android
- CVE-2025-22422In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will beGoogle Android
- CVE-2025-22419In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlaGoogle Android
- CVE-2025-22418In multiple locations, there is a possible confused deputy due to Intent Redirect.Google Android
- CVE-2025-22417In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacking/overlay attack.Google Android
- CVE-2025-22416In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy.Google Android
- CVE-2024-49730In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption.Google Android
- CVE-2024-49720In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic eGoogle Android
- CVE-2024-40653In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a loGoogle Android
- CVE-2025-9330Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityFoxit PDF Reader
- CVE-2025-9326Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2025-9328Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2025-9329Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2025-8300Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation VulnerabilityRealtek rtl81xx SDK
- CVE-2025-8299Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation VulnerabilityRealtek rtl81xx SDK
- CVE-2025-8301Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation VulnerabilityRealtek RTL8811AU
- CVE-2025-8302Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation VulnerabilityRealtek rtl81xx SDK
- CVE-2025-9275Oxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOxford Instruments Imaris Viewer
- CVE-2025-9274Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityOxford Instruments Imaris Viewer
- CVE-2025-8613Vacron Camera ping Command Injection Remote Code Execution VulnerabilityVacron Camera
- CVE-2025-6685ATEN eco DC Missing Authorization Privilege Escalation VulnerabilityATEN eco DC
- CVE-2025-7976Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution VulnerabilityAnritsu ShockLine
- CVE-2025-7975Anritsu ShockLine CHX File Parsing Directory Traversal Remote Code Execution VulnerabilityAnritsu ShockLine
- CVE-2025-8614NoMachine Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityNoMachine
- CVE-2025-57777Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLabDigilent DASYLab
- CVE-2025-57775Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLabDigilent DASYLab
- CVE-2025-9188Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLabDigilent DASYLab
- CVE-2025-57778Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLabDigilent DASYLab
- CVE-2025-57776Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLabDigilent DASYLab
- CVE-2025-57774Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLabDigilent DASYLab
- CVE-2025-9189Out Of Bounds Write when parsing a DSB file with Digilent DASYLabDigilent DASYLab · measX DASYLab
- CVE-2025-9784Undertow: undertow madeyoureset http/2 ddos vulnerabilityundertow · Red Hat build of Apache Camel 4.14.2 for Spr… +11
- CVE-2025-2413OTP Bypass in Akinsoft's ProKuaforAkinsoft ProKuafor
- CVE-2024-58259Rancher affected by unauthenticated Denial of ServiceSUSE rancher · github.com/rancher/rancher
- CVE-2025-2414OTP Bypass in Akinsoft's OctoCloudAkinsoft OctoCloud
- CVE-2024-52284Rancher Fleet Helm Values are stored inside BundleDeployment in plain textSUSE Rancher · github.com/rancher/fleet
- CVE-2025-46810A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate openSUSE Tumbleweed
- CVE-2025-52550Firmware upgrade packages are unsignedCopeland LP E3 Supervisory Control
- CVE-2025-52547DoS to the application servicesCopeland LP E3 Supervisory Control
- CVE-2025-52545Privilege escalation in the application servicesCopeland LP E3 Supervisory Control
- CVE-2025-52544Arbitrary read file from the filesystemCopeland LP E3 Supervisory Control
- CVE-2025-9573Command Injection in extension "TYPO3 Backup Plus" (ns_backup)Extension "TYPO3 Backup Plus"
- CVE-2025-41690Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditionsEndress+Hauser Promag 10 with HART · Endress+Hauser Prom… +4
- CVE-2025-9815alaneuler batteryKid NSXPCListener PrivilegeHelper.swift missing authenticationalaneuler batteryKid
- CVE-2025-9813Tenda CH22 SetSambaConf formSetSambaConf buffer overflowTenda CH22
- CVE-2025-9812Tenda CH22 exeCommand formexeCommand buffer overflowTenda CH22
- CVE-2025-58178Command Injection via sonarqube-scan-action GitHub ActionSonarSource sonarqube-scan-action
- CVE-2025-57808ESP-IDF web_server basic auth bypass using empty or incomplete Authorization headeresphome
- CVE-2025-54599The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, whe
- CVE-2025-57612An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name() method allows an att
- CVE-2025-57613An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input() constructor funct
- CVE-2025-57614An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid input vulnerability in the cached method all
- CVE-2025-57615An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new constructor function
- CVE-2025-57616An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A use-after-free vulnerability in the write_interleaved method allows an
Medium, low and unrated 65
- CVE-2025-9841code-projects Mobile Shop Management System AddNewProduct.php unrestricted uploadcode-projects Mobile Shop Management System
- CVE-2025-9260Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Readtechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2025-9840itsourcecode Sports Management System gametype.php sql injectionitsourcecode Sports Management System
- CVE-2025-9839itsourcecode Student Information Management System index.php sql injectionitsourcecode Student Information Management System
- CVE-2025-9838itsourcecode Student Information Management System index.php sql injectionitsourcecode Student Information Management System
- CVE-2025-22431In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due Google Android
- CVE-2025-22430In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check.Google Android
- CVE-2025-22421In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen dueGoogle Android
- CVE-2024-49728In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy.Google Android
- CVE-2024-49722In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy.Google Android
- CVE-2025-9837itsourcecode Student Information Management System index.php sql injectionitsourcecode Student Information Management System
- CVE-2025-9836macrozheng mall paySuccess authorizationmacrozheng mall
- CVE-2025-9835macrozheng mall cancelUserOrder cancelOrder authorizationmacrozheng mall
- CVE-2025-9834PHPGurukul Small CRM registration.php cross site scriptingPHPGurukul Small CRM
- CVE-2025-9833SourceCodester Online Farm Management System login.php sql injectionSourceCodester Online Farm Management System
- CVE-2025-9832SourceCodester Food Ordering Management System register-router.php sql injectionSourceCodester Food Ordering Management System
- CVE-2025-9831PHPGurukul Beauty Parlour Management System edit-services.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-9323Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2025-9324Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2025-9325Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2025-9327Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2025-8298Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure VulnerabilityRealtek RTL8811AU
- CVE-2025-9830PHPGurukul Beauty Parlour Management System add-customer-services.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-9273CData API Server MySQL Misconfiguration Information Disclosure VulnerabilityCData API Server
- CVE-2025-7974rocket.chat Incorrect Authorization Information Disclosure Vulnerabilityrocket.chat
- CVE-2025-36162IBM DevOps Deploy / IBM UrbanCode Deploy information disclosureIBM UrbanCode Deploy
- CVE-2025-9829PHPGurukul Beauty Parlour Management System signup.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-43726Dell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access ('Link FollowiDell Alienware Command Center 5.x
- CVE-2025-9828Tenda CP6 uhttp sub_2B7D04 risky encryptionTenda CP6
- CVE-2025-0670IDOR in Akinsoft's ProKuaforAkinsoft ProKuafor
- CVE-2024-12974XSS in Akinsoft's ProKuaförAkinsoft ProKuaför
- CVE-2025-0640IDOR in Akinsoft's OctoCloudAkinsoft OctoCloud
- CVE-2024-12973Host Header Injection in Akinsoft's OctoCloudAkinsoft OctoCloud
- CVE-2024-12972XSS in Akinsoft's OctoCloudAkinsoft OctoCloud
- CVE-2025-52548Enabling SSH and Shellinabox on the vulnerable machineCopeland LP E3 Supervisory Control
- CVE-2025-52546Stored XSS by uploading a specially crafted floor plan fileCopeland LP E3 Supervisory Control
- CVE-2025-52543Login to the application services using only the password hashCopeland LP E3 Supervisory Control
- CVE-2025-41031Multiple vulnerabilities in Deporsite by T-INNOVAT-INNOVA Deporsite
- CVE-2025-41030Multiple vulnerabilities in Deporsite by T-INNOVAT-INNOVA Deporsite
- CVE-2025-44017"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication."Gunosy" App for Android · "Gunosy" App for iOS
- CVE-2025-9814PHPGurukul Beauty Parlour Management System contact-us.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-9811Campcodes Farm Management System reviewInput.php sql injectionCampcodes Farm Management System
- CVE-2025-8662OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This isOpenAM consortium OpenAM
- CVE-2025-58162MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a ExtractionMobile-Security-Framework-MobSF · mobsf
- CVE-2025-58161MobSF Path Traversal in GET /download/<filename> using absolute filenamesMobile-Security-Framework-MobSF · mobsf
- CVE-2025-9806Tenda F1202 Administrative shadow hard-coded credentialsTenda F1202
- CVE-2025-9805SimStudioAI sim route.ts server-side request forgerySimStudioAI sim
- CVE-2024-48705Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection wh
- CVE-2024-51423Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via
- CVE-2025-32098An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows.
- CVE-2025-32100An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380,
- CVE-2025-46047A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers toorg.silverpeas.core:silverpeas-core
- CVE-2025-50565Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker.
- CVE-2025-50755Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter.
- CVE-2025-50757Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter.
- CVE-2025-51966A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1.
- CVE-2025-55372An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafte
- CVE-2025-55373Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges
- CVE-2025-55472SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint.
- CVE-2025-55473Asian Arts Talents Foundation (AATF) Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting (XSS).
- CVE-2025-55474Many Notes 0.10.1 is vulnerable to Cross Site Scripting (XSS), which allows malicious Markdown files to execute JavaScript when viewed.
- CVE-2025-55476FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/pu
- CVE-2025-55824ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands
- CVE-2025-56254PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php.
- CVE-2025-57611An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump() method allows an att