# CVEs published 2025-09-10

97 CVEs were published on September 10, 2025: 4 critical, 38 high. Days are UTC.

- [CVE-2025-10234](https://cve.now/CVE-2025-10234.md): Scada-LTS Data Point Edit data\_point\_edit.shtm cross site scripting (CVSS 4.8, Scada-LTS)
- [CVE-2025-10233](https://cve.now/CVE-2025-10233.md): kalcaddle kodbox editor.class.php fileSave path traversal (CVSS 5.3, kalcaddle kodbox)
- [CVE-2025-10232](https://cve.now/CVE-2025-10232.md): 299ko FileManagerAPIController.php delete path traversal (CVSS 5.3, 299ko)
- [CVE-2025-10229](https://cve.now/CVE-2025-10229.md): Freshwork logout redirect (CVSS 5.3, Freshwork)
- [CVE-2025-10218](https://cve.now/CVE-2025-10218.md): lostvip-com ruoyi-go Background Management SysRoleDao.go SelectListPage sql injection (CVSS 5.3, lostvip-com ruoyi-go)
- [CVE-2025-10216](https://cve.now/CVE-2025-10216.md): GrandNode Voucher ConfirmOrder race condition (CVSS 2.1, GrandNode)
- [CVE-2025-59052](https://cve.now/CVE-2025-59052.md): Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage (CVSS 7.1, angular · @angular/platform-server +2)
- [CVE-2024-45671](https://cve.now/CVE-2024-45671.md): IBM Security Verify Information Queue information disclosure (CVSS 5.9, IBM Security Verify Information Queue)
- [CVE-2024-45669](https://cve.now/CVE-2024-45669.md): IBM Security Verify Information Queue denial of service (CVSS 6.5, IBM Security Verify Information Queue)
- [CVE-2024-47120](https://cve.now/CVE-2024-47120.md): IBM Security Verify Information Queue code execution (CVSS 6.4, IBM Security Verify Information Queue)
- [CVE-2025-43783](https://cve.now/CVE-2025-43783.md): Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1 (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10211](https://cve.now/CVE-2025-10211.md): yanyutao0402 ChanCMS getArticle CollectController server-side request forgery (CVSS 5.3, yanyutao0402 ChanCMS)
- [CVE-2025-54376](https://cve.now/CVE-2025-54376.md): Hoverfly's WebSocket endpoint \`/api/v2/ws/logs\` reachable without authentication even when --auth is enabled. (CVSS 7.8, SpectoLabs hoverfly · github.com/SpectoLabs/hoverfly)
- [CVE-2025-10201](https://cve.now/CVE-2025-10201.md): Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypas (CVSS 8.8, Google Chrome)
- [CVE-2025-10200](https://cve.now/CVE-2025-10200.md): Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap co (CVSS 8.8, Google Chrome)
- [CVE-2025-43784](https://cve.now/CVE-2025-43784.md): Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 thr (CVSS 6.2, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10210](https://cve.now/CVE-2025-10210.md): yanyutao0402 ChanCMS Api.js search sql injection (CVSS 5.3, yanyutao0402 ChanCMS)
- [CVE-2025-59049](https://cve.now/CVE-2025-59049.md): Mockoon has a Path Traversal and LFI in the static file serving endpoint (CVSS 7.5, mockoon · @mockoon/commons-server +1)
- [CVE-2025-9714](https://cve.now/CVE-2025-9714.md): Stack overflow in libxml2 (CVSS 6.2, libxml2)
- [CVE-2025-54123](https://cve.now/CVE-2025-54123.md): Hoverfly vulnerable to remote code execution at \`/api/v2/hoverfly/middleware\` endpoint due to insecure middleware implementation (CVSS 9.8, SpectoLabs hoverfly · github.com/SpectoLabs/hoverfly)
- [CVE-2025-10209](https://cve.now/CVE-2025-10209.md): Papermerge DMS Authorization Token improper authorization (CVSS 5.3, Papermerge DMS)
- [CVE-2025-8696](https://cve.now/CVE-2025-8696.md): DoS attack against the Stork UI from an unauthenticated user (CVSS 7.5, ISC Stork)
- [CVE-2025-43785](https://cve.now/CVE-2025-43785.md): Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2 (CVSS 4.6, Liferay Portal · Liferay DXP +3)
- [CVE-2025-59045](https://cve.now/CVE-2025-59045.md): Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion (CVSS 7.1, stalwartlabs stalwart)
- [CVE-2025-43886](https://cve.now/CVE-2025-43886.md): Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. (CVSS 4.4, Dell PowerProtect Data Manager)
- [CVE-2025-20340](https://cve.now/CVE-2025-20340.md): Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2025-20159](https://cve.now/CVE-2025-20159.md): Cisco IOS XR Software Management Interface ACL Bypass Vulnerability (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2025-20248](https://cve.now/CVE-2025-20248.md): Cisco IOS XR Software Image Verification Bypass Vulnerability (CVSS 6.0, Cisco IOS XR Software)
- [CVE-2025-43938](https://cve.now/CVE-2025-43938.md): Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password vulnerability. (CVSS 5.0, Dell PowerProtect Data Manager)
- [CVE-2025-59035](https://cve.now/CVE-2025-59035.md): Indico vulnerable to Cross-Site Scripting via LaTeX math code (CVSS 4.6, indico)
- [CVE-2025-59034](https://cve.now/CVE-2025-59034.md): Indico may disclose unauthorized user details access via legacy API (CVSS 4.3, indico)
- [CVE-2025-8681](https://cve.now/CVE-2025-8681.md): Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component (CVSS 5.5, Pegasystems Pega Infinity)
- [CVE-2025-43887](https://cve.now/CVE-2025-43887.md): Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Incorrect Default Permissions vulnerability. (CVSS 7.0, Dell PowerProtect Data Manager)
- [CVE-2025-43725](https://cve.now/CVE-2025-43725.md): Dell PowerProtect Data Manager, Generic Application Agent, version(s) 19.19 and 19.20, contain(s) an Incorrect Default Permissions vulnerabi (CVSS 7.8, Dell PowerProtect Data Manager)
- [CVE-2025-43885](https://cve.now/CVE-2025-43885.md): Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS (CVSS 7.8, Dell PowerProtect Data Manager)
- [CVE-2025-43884](https://cve.now/CVE-2025-43884.md): Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) an Improper Neutralization of Special Elements used in an OS (CVSS 8.2, Dell PowerProtect Data Manager)
- [CVE-2025-43888](https://cve.now/CVE-2025-43888.md): Dell PowerProtect Data Manager, Hyper-V, version(s) 19.19 and 19.20, contain(s) an Insertion of Sensitive Information into Log File vulnerab (CVSS 8.8, Dell PowerProtect Data Manager)
- [CVE-2025-59041](https://cve.now/CVE-2025-59041.md): Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email (CVSS 8.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2025-58764](https://cve.now/CVE-2025-58764.md): Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution (CVSS 8.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2025-10231](https://cve.now/CVE-2025-10231.md): N-central Incorrect Default Permissions could lead to Privilege Escalation (CVSS 7.0, N-able N-central)
- [CVE-2025-10227](https://cve.now/CVE-2025-10227.md): Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8 (CVSS 4.6, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-10226](https://cve.now/CVE-2025-10226.md): PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities (CVSS 9.8, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-10225](https://cve.now/CVE-2025-10225.md): Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk) (CVSS 7.5, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-10224](https://cve.now/CVE-2025-10224.md): Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk) (CVSS 5.4, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-10223](https://cve.now/CVE-2025-10223.md): Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk) (CVSS 5.4, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-10222](https://cve.now/CVE-2025-10222.md): Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS (CVSS 3.3, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-10221](https://cve.now/CVE-2025-10221.md): Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs (CVSS 5.5, AxxonSoft AxxonNet ARP Agent C-WerkNet)
- [CVE-2025-10220](https://cve.now/CVE-2025-10220.md): Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 (CVSS 9.8, AxxonSoft AxxonOne C-Werk)
- [CVE-2025-7718](https://cve.now/CVE-2025-7718.md): Resideo Plugin for Resideo - Real Estate WordPress Theme \<= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover (CVSS 8.8, pixel\_prime Resideo Plugin for Resideo - Real Estate WordPr…)
- [CVE-2025-40725](https://cve.now/CVE-2025-40725.md): Reflected Cross-Site Scripting (XSS) in Azon Dominator (CVSS 5.1, Azon Dominator PHP script)
- [CVE-2025-10215](https://cve.now/CVE-2025-10215.md): DLL search path hijacking vulnerability (CVSS 7.0, UPDF)
- [CVE-2025-10214](https://cve.now/CVE-2025-10214.md): DLL search path hijacking vulnerability (CVSS 7.0, UPDF)
- [CVE-2025-10213](https://cve.now/CVE-2025-10213.md): DLL search path hijacking vulnerability (CVSS 7.0, UPDF)
- [CVE-2025-40979](https://cve.now/CVE-2025-40979.md): DLL search order hijack in Wave by Grandstream Networks (CVSS 7.0, Grandstream Networks Wave)
- [CVE-2025-36759](https://cve.now/CVE-2025-36759.md): Sensitive Information Disclosure in SolaX Cloud (CVSS 8.7, SolaX Power SolaX Cloud)
- [CVE-2025-36757](https://cve.now/CVE-2025-36757.md): Bypass of administrator login screen in SolaX Cloud (CVSS 6.3, SolaX Power SolaX Cloud)
- [CVE-2025-36758](https://cve.now/CVE-2025-36758.md): Bypass of bruteforce protection in SolaX Cloud (CVSS 6.3, SolaX Power SolaX Cloud)
- [CVE-2025-36756](https://cve.now/CVE-2025-36756.md): Device Takeover vulnerability in SolaX Cloud (CVSS 5.8, SolaX Power SolaX Cloud)
- [CVE-2025-41714](https://cve.now/CVE-2025-41714.md): Path Traversal via 'Upload-Key' in SmartEMS Upload Handling (CVSS 8.8, Welotec SmartEMS Web Application)
- [CVE-2025-9943](https://cve.now/CVE-2025-9943.md): Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider (CVSS 9.1, Shibboleth Service Provider)
- [CVE-2025-10142](https://cve.now/CVE-2025-10142.md): PagBank / PagSeguro Connect para WooCommerce \<= 4.44.3 - Authenticated (Shop Manager+) SQL Injection (CVSS 4.9, martins56 PagBank / PagSeguro Connect para WooCommerce)
- [CVE-2025-9857](https://cve.now/CVE-2025-9857.md): Heateor Login – Social Login Plugin \<= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Heateor Login – Social Login Plugin)
- [CVE-2025-10126](https://cve.now/CVE-2025-10126.md): MyBrain Utilities \<= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, markohoven MyBrain Utilities)
- [CVE-2025-10001](https://cve.now/CVE-2025-10001.md): Import any XML, CSV or Excel File to WordPress \<= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload (CVSS 7.2, wpallimport WP All Import – Drag & Drop Import for CSV, XML…)
- [CVE-2025-9888](https://cve.now/CVE-2025-9888.md): Maspik \<= 2.5.6 - Cross-Site Request Forgery (CVSS 4.3, yonifre Maspik – Ultimate Spam Protection)
- [CVE-2025-9622](https://cve.now/CVE-2025-9622.md): WP Blast | SEO & Performance Booster \<= 1.8.6 - Cross-Site Request Forgery to Cache Clearing (CVSS 4.3, wpblast WP Blast | SEO & Performance Booster)
- [CVE-2025-10040](https://cve.now/CVE-2025-10040.md): WP Import – Ultimate CSV XML Importer for WordPress \<= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure (CVSS 7.7, smackcoders WP Ultimate CSV Importer – Import CSV, XML & Ex…)
- [CVE-2025-7843](https://cve.now/CVE-2025-7843.md): Auto Save Remote Images (Drafts) \<= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery (CVSS 6.4, fernandiez Auto Save Remote Images)
- [CVE-2025-7826](https://cve.now/CVE-2025-7826.md): Testimonial \<= 2.3 - Authenticated (Contributor+) SQL Injection (CVSS 6.5, laki\_patel Testimonial)
- [CVE-2025-9367](https://cve.now/CVE-2025-9367.md): Welcart e-Commerce \<= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting (CVSS 5.5, uscnanbu Welcart e-Commerce)
- [CVE-2025-9979](https://cve.now/CVE-2025-9979.md): Maspik \<= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export (CVSS 4.3, yonifre Maspik – Ultimate Spam Protection)
- [CVE-2025-8778](https://cve.now/CVE-2025-8778.md): NitroPack \<= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack\_set\_compression\_ajax Function (CVSS 4.3, NitroPack – Performance, Page Speed & Cache Plugin for Core…)
- [CVE-2025-9463](https://cve.now/CVE-2025-9463.md): Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net \<= 1.117.5 - Authenticated (Contributor+) SQL Injection via order\_by Parameter (CVSS 6.5, PeachPay — Payments & Express Checkout for WooCommerce)
- [CVE-2025-6189](https://cve.now/CVE-2025-6189.md): Duplicate Page and Post \<= 2.9.5 - Authenticated (Contributor+) SQL Injection via meta\_key Parameter (CVSS 6.5, arjunthakur Duplicate Page and Post)
- [CVE-2025-7049](https://cve.now/CVE-2025-7049.md): WPGYM - Wordpress Gym Management System \<= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover (CVSS 8.8, dasinfomedia WPGYM - Wordpress Gym Management System)
- [CVE-2025-10049](https://cve.now/CVE-2025-10049.md): Responsive Filterable Portfolio \<= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2, nik00726 Responsive Filterable Portfolio)
- [CVE-2025-8388](https://cve.now/CVE-2025-8388.md): PowerPack Lite for Elementor \<= 2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor\_url' (CVSS 6.4, ideaboxcreations PowerPack Addons for Elementor)
- [CVE-2025-10197](https://cve.now/CVE-2025-10197.md): HJSoft HCM Human Resources Management System downlawbase sql injection (CVSS 5.3, HJSoft HCM Human Resources Management System)
- [CVE-2025-10195](https://cve.now/CVE-2025-10195.md): Seismic App com.seismic.doccenter AndroidManifest.xml improper export of android application components (CVSS 4.8, Seismic App)
- [CVE-2025-29592](https://cve.now/CVE-2025-29592.md): oasys v1.1 is vulnerable to Directory Traversal in ProcedureController. (CVSS 5.6)
- [CVE-2025-50892](https://cve.now/CVE-2025-50892.md): The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests (IRP (CVSS 7.8)
- [CVE-2025-55976](https://cve.now/CVE-2025-55976.md): Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. (CVSS 8.4)
- [CVE-2025-56404](https://cve.now/CVE-2025-56404.md): An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks u (CVSS 7.5)
- [CVE-2025-56405](https://cve.now/CVE-2025-56405.md): An issue was discovered in litmusautomation litmus-mcp-server thru 0.0.1 allowing unauthorized attackers to control the target's MCP service (CVSS 7.5)
- [CVE-2025-56406](https://cve.now/CVE-2025-56406.md): An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE serv (CVSS 7.5)
- [CVE-2025-56407](https://cve.now/CVE-2025-56407.md): A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. (CVSS 8.8)
- [CVE-2025-56413](https://cve.now/CVE-2025-56413.md): OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation (CVSS 8.8)
- [CVE-2025-56466](https://cve.now/CVE-2025-56466.md): Hardcoded credentials in Dietly v1.25.0 for android allows attackers to gain sensitive information. (CVSS 7.5)
- [CVE-2025-56578](https://cve.now/CVE-2025-56578.md): An issue in RTSPtoWeb v.2.4.3 allows a remote attacker to obtain sensitive information and executearbitrary code via the lack of authenticat (CVSS 5.7)
- [CVE-2025-57392](https://cve.now/CVE-2025-57392.md): BenimPOS Masaustu 3.0.x is affected by insecure file permissions. (CVSS 7.8)
- [CVE-2025-57520](https://cve.now/CVE-2025-57520.md): A Cross Site Scripting (XSS) vulnerability exists in Decap CMS thru 3.8.3. (CVSS 6.1, decap-cms)
- [CVE-2025-57569](https://cve.now/CVE-2025-57569.md): Tenda F3 V12.01.01.48\_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT. (CVSS 5.6)
- [CVE-2025-57570](https://cve.now/CVE-2025-57570.md): Tenda F3 V12.01.01.48\_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS. (CVSS 5.6)
- [CVE-2025-57571](https://cve.now/CVE-2025-57571.md): Tenda F3 V12.01.01.48\_multi and after is vulnerable to Buffer Overflow. (CVSS 5.6)
- [CVE-2025-57572](https://cve.now/CVE-2025-57572.md): Tenda F3 V12.01.01.48\_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl. (CVSS 5.6)
- [CVE-2025-57573](https://cve.now/CVE-2025-57573.md): Tenda F3 V12.01.01.48\_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi. (CVSS 5.6)
- [CVE-2025-57642](https://cve.now/CVE-2025-57642.md): A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the se (CVSS 7.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.