CVEs published September 11, 2025
155 CVEs were published on September 11, 2025: 13 critical, 35 high.
- Published
- 155
- Critical
- 13
- High
- 35
- Medium
- 63
- Low
- 5
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 42
Most affected products
- Linux
- 54
- PHPGurukul Online Fire Reporting System
- 9
- Xen
- 5
- Erlang OTP
- 4
- erjinzhi 10OA
- 3
- Ascensio System SIA OnlyOffice
- 2
- Delta Electronics DIALink
- 2
- Liferay Portal · Liferay DXP +1
- 2
- mythemeshop My WP Translate
- 2
- OpenPrinting cups
- 2
Critical 13
- CVE-2025-10127Daikin Europe N.V Security Gateway Weak Password Recovery Mechanism for Forgotten PasswordDaikin Europe N.V Security Gateway
- CVE-2025-59053AIRI's character card/chat UI is vulnerable to XSS and can lead to RCEmoeru-ai airi
- CVE-2025-39758RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpagesLinux
- CVE-2025-58143Mutiple vulnerabilities in the Viridian interfaceXen
- CVE-2025-58142Mutiple vulnerabilities in the Viridian interfaceXen
- CVE-2025-27466Mutiple vulnerabilities in the Viridian interfaceXen
- CVE-2025-40692SQL injection in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40691SQL injection in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40690SQL injection in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40689SQL injection in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40687SQL injection in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-58321DIALink - Directory Traversal Authentication Bypass VulnerabilityDelta Electronics DIALink
- CVE-2025-8570BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user FilterBeyondCart Connector
High 35
- CVE-2025-36222IBM Fusion insecure default configurationIBM Fusion
- CVE-2025-8061A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some LenoLenovo Dispatcher 3.0 Driver · Lenovo Dispatcher 3.1 Driver
- CVE-2025-8557An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a Lenovo XClarity Orchestrator
- CVE-2025-9319A potential vulnerability was reported in the Lenovo Wallpaper Client that could allow arbitrary code execution under certain conditions.Lenovo Wallpaper Client
- CVE-2025-9201A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local useLenovo Browser
- CVE-2025-43790Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.6Liferay Portal · Liferay DXP +1
- CVE-2025-58060cups has Authentication bypass with AuthType NegotiateOpenPrinting cups
- CVE-2025-39791dm: dm-crypt: Do not partially accept write BIOs with zoned targetsLinux
- CVE-2025-39790bus: mhi: host: Detect events pointing to unexpected TREsLinux
- CVE-2025-39789crypto: x86/aegis - Add missing error checksLinux
- CVE-2025-39787soc: qcom: mdt_loader: Ensure we don't read past the ELF headerLinux
- CVE-2025-39786iio: adc: ad7173: fix channels index for syscalib_modeLinux
- CVE-2025-39785drm/hisilicon/hibmc: fix irq_request()'s irq name variable is localLinux
- CVE-2025-39780sched/ext: Fix invalid task state transitions on class switchLinux
- CVE-2025-39779btrfs: subpage: keep TOWRITE tag until folio is cleanedLinux
- CVE-2025-39776mm/debug_vm_pgtable: clear page table entries at destroy_args()Linux
- CVE-2025-39770net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUMLinux
- CVE-2025-39761wifi: ath12k: Decrement TID on RX peer frag setup error handlingLinux
- CVE-2025-39750wifi: ath12k: Correct tid cleanup when tid setup failsLinux
- CVE-2025-39740drm/xe/migrate: prevent potential UAFLinux
- CVE-2025-39738btrfs: do not allow relocation of partially dropped subvolumesLinux
- CVE-2025-58145Arm issues with page refcountingXen
- CVE-2025-58144Arm issues with page refcountingXen
- CVE-2025-10193Neo4j Cypher MCP server is vulnerable to DNS rebinding attacksneo4j-cypher MCP server · mcp-neo4j-cypher
- CVE-2025-9018Time Tracker <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Limited Data Deletiongermanpearls Time Tracker
- CVE-2025-58320DIALink - Directory Traversal Authentication Bypass VulnerabilityDelta Electronics DIALink
- CVE-2025-48041SSH_FXP_OPENDIR may Lead to Exhaustion of File HandlesErlang OTP
- CVE-2025-9918Zip Slip in Google SecOps SOAR allows for Remote Code ExecutionGoogle Cloud Google SecOps SOAR
- CVE-2025-8425My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Updatemythemeshop My WP Translate
- CVE-2025-9693User Meta – User Profile Builder and User management plugin <= 3.1.2 - Authenticated (Subscriber+) Arbitrary File Deletionkhaledsaikat User Meta – User Profile Builder and User mana…
- CVE-2025-9874Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusionwebcodingplace Ultimate Classified Listings
- CVE-2025-9073All in one Minifier <= 3.2 - Unauthenticated SQL Injectionmaheshmthorat All in one Minifier
- CVE-2025-8417Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injectionidiatech Catalog Importer, Scraper & Crawler
- CVE-2025-8422Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Readfassionstorage Propovoice: All-in-One Client Management Sys…
- CVE-2025-9059Elevation of Privileges Vulnerability in IT Management SuiteBroadcom 8.6.IT Management Suite
Medium, low and unrated 107
- CVE-2025-10273erjinzhi 10OA file.aspx path traversalerjinzhi 10OA
- CVE-2025-10272erjinzhi 10OA catalogue cross site scriptingerjinzhi 10OA
- CVE-2025-10271erjinzhi 10OA finder cross site scriptingerjinzhi 10OA
- CVE-2025-59055InstantCMS vulnerable to Server-Side Request Forgery via package installerinstantsoft icms2
- CVE-2025-9214A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or moLenovo LJ2206W Printer · Lenovo M7206W Printer +10
- CVE-2025-59047matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` methodmatrix-org matrix-rust-sdk · matrix-sdk-base
- CVE-2025-58065Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methodsdpgaspar Flask-AppBuilder · flask-appbuilder
- CVE-2025-43782Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7Liferay Portal · Liferay DXP +1
- CVE-2025-58364cups: Remote DoS via null dereferenceOpenPrinting cups
- CVE-2025-39788scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPELinux
- CVE-2025-39784PCI: Fix link speed calculation on retrain failureLinux
- CVE-2025-39783PCI: endpoint: Fix configfs group list head handlingLinux
- CVE-2025-39782jbd2: prevent softlockup in jbd2_log_do_checkpoint()Linux
- CVE-2025-39781parisc: Drop WARN_ON_ONCE() from flush_cache_vmapLinux
- CVE-2025-39777crypto: acomp - Fix CFI failure due to type punningLinux
- CVE-2025-39775mm/mremap: fix WARN with uffd that has remap events disabledLinux
- CVE-2025-39774iio: adc: rzg2l_adc: Set driver data before enabling runtime PMLinux
- CVE-2025-39773net: bridge: fix soft lockup in br_multicast_query_expired()Linux
- CVE-2025-39772drm/hisilicon/hibmc: fix the hibmc loaded failed bugLinux
- CVE-2025-39771regulator: pca9450: Use devm_register_sys_off_handlerLinux
- CVE-2025-39769bnxt_en: Fix lockdep warning during rmmodLinux
- CVE-2025-39768net/mlx5: HWS, fix complex rules rehash error flowLinux
- CVE-2025-39767LoongArch: Optimize module load time by optimizing PLT/GOT countingLinux
- CVE-2025-39766net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limitLinux
- CVE-2025-39765ALSA: timer: fix ida_free call while not allocatedLinux
- CVE-2025-39764netfilter: ctnetlink: remove refcounting in expectation dumpersLinux
- CVE-2025-39763ACPI: APEI: send SIGBUS to current task if synchronous memory error not recoveredLinux
- CVE-2025-39762drm/amd/display: add null checkLinux
- CVE-2025-39760usb: core: config: Prevent OOB read in SS endpoint companion parsingLinux
- CVE-2025-39759btrfs: qgroup: fix race between quota disable and quota rescan ioctlLinux
- CVE-2025-39757ALSA: usb-audio: Validate UAC3 cluster segment descriptorsLinux
- CVE-2025-39756fs: Prevent file descriptor table allocations exceeding INT_MAXLinux
- CVE-2025-39754mm/smaps: fix race between smaps_hugetlb_range and migrationLinux
- CVE-2025-39753gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aopsLinux
- CVE-2025-39752ARM: rockchip: fix kernel hang during smp initializationLinux
- CVE-2025-39749rcu: Protect ->defer_qs_iw_pending from data raceLinux
- CVE-2025-39748bpf: Forget ranges when refining tnum after JSETLinux
- CVE-2025-39747drm/msm: Add error handling for krealloc in metadata setupLinux
- CVE-2025-39746wifi: ath10k: shutdown driver when hardware is unreliableLinux
- CVE-2025-39745rcutorture: Fix rcutorture_one_extend_check() splat in RT kernelsLinux
- CVE-2025-39744rcu: Fix rcu_read_unlock() deadloop due to IRQ workLinux
- CVE-2025-39743jfs: truncate good inode pages when hard link is 0Linux
- CVE-2025-39742RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()Linux
- CVE-2025-39741drm/xe/migrate: don't overflow max copy sizeLinux
- CVE-2025-39739iommu/arm-smmu-qcom: Add SM6115 MDSS compatibleLinux
- CVE-2025-39737mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()Linux
- CVE-2025-39736mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lockLinux
- CVE-2025-40300x86/vmscape: Add conditional IBPB mitigationLinux
- CVE-2025-26499Under heavy system utilization a random race condition can occur during authentication or token refresh operation.Wind River Studio Developer
- CVE-2025-10255Ascensio System SIA OnlyOffice Comment Messages.aspx cross site scriptingAscensio System SIA OnlyOffice
- CVE-2025-10254Ascensio System SIA OnlyOffice SVG Image Messages.aspx cross site scriptingAscensio System SIA OnlyOffice
- CVE-2025-10253openDCIM SVG File uploadifive.php cross site scriptingopenDCIM
- CVE-2025-8716Cache exploitation vulnerabilityOpenText Content Management
- CVE-2025-10252SEAT Queue Ticket Kiosk Java RMI Registry deserializationSEAT Queue Ticket Kiosk
- CVE-2025-10251FoxCMS Images.php batchCope sql injectionFoxCMS
- CVE-2025-40696Cross Site Scripting in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40695Cross Site Scripting in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40694Cross Site Scripting in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-40693Cross Site Scripting in PHPGurukul Online Fire Reporting SystemPHPGurukul Online Fire Reporting System
- CVE-2025-10250DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded keyDJI Mavic Spark · DJI Mavic Air +1
- CVE-2025-48040Malicious Key Exchange Messages may Lead to Excessive Resource ConsumptionErlang OTP
- CVE-2025-48039Unverified Paths can Cause Excessive Use of System ResourcesErlang OTP
- CVE-2025-48038Unverified File Handles can Cause Excessive Use of System ResourcesErlang OTP
- CVE-2025-9633LH Signing <= 2.83 - Cross-Site Request Forgeryshawfactor LH Signing
- CVE-2025-8691WP Scriptcase <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parametersoftmus WP Scriptcase
- CVE-2025-8398azurecurve BBCode <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Shortcodeazurecurve BBCode
- CVE-2025-9855Enhanced BibliPlug <= 1.3.8 - Authenticated (Contirbutor+) Stored Cross-Site Scriptingzuotian Enhanced BibliPlug
- CVE-2025-9123CBX Map for Google Map & OpenStreetMap <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingmanchumahara CBX Map for Google Map & OpenStreetMap
- CVE-2025-9632PhpList Subber <= 1.1 - Cross-Site Request Forgeryvinzzb PhpList Subber
- CVE-2025-9617Publish approval <= 1.1 - Cross-Site Request Forgeryevidentlycube Publish approval
- CVE-2025-9128eID Easy <= 4.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parametereideasy eID Easy
- CVE-2025-9620Seo Monster <= 3.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scriptingedsteep Seo Monster
- CVE-2025-9451Smartcat Translator for WPML <= 3.1.72 - Authenticated (Author+) SQL Injection via orderby Parametersmartcatai Smartcat Translator for WPML
- CVE-2025-8689Elements Plus! <= 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetscssigniterteam Elements Plus!
- CVE-2025-8215Responsive Addons for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetscyberchimps Responsive Addons for Elementor – Free Elemento…
- CVE-2025-8481Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgerymdimran41 Blog Designer For Elementor – Post Slider, Post C…
- CVE-2025-9623Admin in English with Switch <= 1.1 - Cross-Site Request Forgerydontcare Admin in English with Switch
- CVE-2025-8392Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameterbessermitfahren Mitfahrgelegenheit
- CVE-2025-8492Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Executionwordpresschef Salon Booking System – Free Version
- CVE-2025-9627Run Log <= 1.7.10 - Cross-Site Request Forgery to Settings Updateizem Run Log
- CVE-2025-9860Mixtape <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingnatata7 Mixtape
- CVE-2025-9635Analytics Reduce Bounce Rate <= 2.3 - Cross-Site Request Forgeryishan001 Analytics Reduce Bounce Rate
- CVE-2025-9634Plugin updates blocker <= 0.2 - Cross-Site Request Forgeryjegerwan Plugin updates blocker
- CVE-2025-8318Jobify <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameterbmarshall511 Jobify
- CVE-2025-8423My WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletionmythemeshop My WP Translate
- CVE-2025-8692Coupon API <= 6.2.12 - Authenticated (Administrator+) SQL Injection via 'log_duration'kamilkhan Coupon API
- CVE-2025-8445Countdown Timer for Elementor <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'countdown_label'shaikhaezaz80 Countdown Timer for Elementor
- CVE-2025-5801Digital Events Calendar <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via column Parameterrejuancse Digital Events Calendar
- CVE-2025-9850Evenium <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site ScriptingEvenium
- CVE-2025-9628The integration of the AMO.CRM <= 1.0.1 - Cross-Site Request Forgeryjh5ru The integration of the AMO.CRM
- CVE-2025-9861ThemeLoom Widgets <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scriptinglivingos ThemeLoom Widgets
- CVE-2025-8686WP Easy FAQs <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via WP_EASY_FAQ Shortcodewen-solutions WP Easy FAQs
- CVE-2025-0763Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updatewebcodingplace Ultimate Classified Listings
- CVE-2025-8316Certifica WP <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via evento Parametermoreirapontocom Certifica WP
- CVE-2025-9631AutoCatSet <= 2.1.4 - Cross-Site Request Forgerygyaku AutoCatSet
- CVE-2025-8721Workable API <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via workable_jobs Shortcodemiriamgoldman Workable Api
- CVE-2025-8479Zoho Flow <= 2.14.1 - Cross-Site Request Forgeryzohoflow Zoho Flow – Integrate 100+ plugins with 1000+ busi…
- CVE-2025-9034Wp Edit Password Protected < 1.3.5 - Open RedirectWp Edit Password Protected
- CVE-2025-10247JEPaaS Filter doFilterInternal access controlJEPaaS
- CVE-2025-10246lokibhardwaj PHP-Code-For-Unlimited-File-Upload f.php cross site scriptinglokibhardwaj PHP-Code-For-Unlimited-File-Upload
- CVE-2025-9910Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin.jsondiffpatch · org.webjars.npm:jsondiffpatch +1
- CVE-2025-9776CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV ImportCatFolders – WordPress Media Library Folders & Categories
- CVE-2025-10245Display Painéis TGA Galeria rename path traversalDisplay Painéis TGA
- CVE-2025-10236binary-husky gpt_academic LaTeX File latex_toolbox.py merge_tex_files_ path traversalbinary-husky gpt_academic
- CVE-2025-6088Improper Authorization in danny-avila/librechatdanny-avila/librechat
- CVE-2025-10235Scada-LTS Reports reports.shtm cross site scriptingScada-LTS
- CVE-2025-56556An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query fintelliants/subrion