CVEs published September 12, 2025
92 CVEs were published on September 12, 2025: 10 critical, 28 high. 2 are now in CISA KEV.
- Published
- 92
- Critical
- 10
- High
- 28
- Medium
- 44
- Low
- 6
- Unrated
- 4
- Now in CISA KEV
- 2
- Fix available
- 26
Most affected products
- Linux
- 7
- GitLab
- 6
- Wavlink WL-WN578W2
- 5
- Zabbix
- 4
- Liferay Portal · Liferay DXP +1
- 3
- MiczFlor RPi-Jukebox-RFID
- 3
- cdevroe unmark
- 2
- curl
- 2
- Digiever DS-1200 · Digiever DS-2100 Pro +16
- 2
- Evertz 3080ipx-10G · Evertz MViP-II +4
- 2
Critical 10
- CVE-2025-58434Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account TakeoverFlowiseAI Flowise · flowise
- CVE-2025-10364Unauthenticated Arbitrary Command Injection in Evertz SDVNEvertz 3080ipx-10G · Evertz MViP-II +4
- CVE-2025-10365Authentication Bypass in Evertz SDVNEvertz 3080ipx-10G · Evertz MViP-II +4
- CVE-2025-9556CVE-2025-9556Langchaingo
- CVE-2025-8699Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards.KioSoft Stored Value Unattended Payment Solution
- CVE-2025-10266NewType Infortech｜NUP Portal - SQL InjectionNewType Infortech NUP Portal
- CVE-2025-10264Digiever｜NVR - Exposure of Sensitive InformationDigiever DS-1200 · Digiever DS-2100 Pro +16
- CVE-2024-45434OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free.
- CVE-2025-45583Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the servic
- CVE-2025-55835File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering.
High 28
- CVE-2025-10176The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletiontvcnet The Hack Repair Guy's Plugin Archiver
- CVE-2025-43796Liferay Portal 7.4.0 through 7.4.3.101, and Liferay DXP 2023.Q3.0 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA though update 35 doLiferay Portal · Liferay DXP +2
- CVE-2025-4235User-ID Credential Agent: Cleartext Exposure of Service Account passwordPalo Alto Networks User-ID Credential Agent
- CVE-2025-39798NFS: Fix the setting of capabilities when automounting a new filesystemLinux
- CVE-2025-39793io_uring/memmap: cast nr_pages to size_t before shiftingLinux
- CVE-2025-39792dm: Always split write BIOs to zoned device limitsLinux
- CVE-2025-59054dstack has insecure LUKS2 persistent storage partitions that may be opened and usedDstack-TEE dstack
- CVE-2025-27240Secondary-order SQL injection in Zabbix Server when deleting an autoregistered hostZabbix
- CVE-2025-27234Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0.Zabbix
- CVE-2025-10265Digiever｜NVR - OS Command InjectionDigiever DS-1200 · Digiever DS-2100 Pro +16
- CVE-2025-7448Man in the middle (MitM) attack vulnerability in Wi-SUN librarysilabs.com Wi-SUN Stack
- CVE-2025-21043Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2025-21042Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2025-2256Improper Validation of Specified Quantity in Input in GitLabGitLab
- CVE-2025-6454Server-Side Request Forgery (SSRF) in GitLabGitLab
- CVE-2025-8575LWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'aurelienlws LWS Cleaner
- CVE-2025-9086Out of bounds read for cookie pathcurl
- CVE-2025-10269Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File InclusionTheme-Spirit Spirit Framework
- CVE-2025-9807The Events Calendar <= 6.15.1 - Unauthenticated SQL Injectionstellarwp The Events Calendar
- CVE-2025-58754Axios is vulnerable to DoS attack through lack of data size checkaxios
- CVE-2025-55319Agentic AI and Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2024-45432OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call.
- CVE-2025-45584Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information with
- CVE-2025-45586An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request.
- CVE-2025-45587A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a
- CVE-2025-57577An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password.
- CVE-2025-57578An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password
- CVE-2025-57579An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default passwo
Medium, low and unrated 54
- CVE-2025-10330cdevroe unmark searchform.php cross site scriptingcdevroe unmark
- CVE-2025-10329cdevroe unmark Marks.php server-side request forgerycdevroe unmark
- CVE-2025-10328MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injectionMiczFlor RPi-Jukebox-RFID
- CVE-2025-10327MiczFlor RPi-Jukebox-RFID shuffle.php os command injectionMiczFlor RPi-Jukebox-RFID
- CVE-2025-10326MiczFlor RPi-Jukebox-RFID single.php os command injectionMiczFlor RPi-Jukebox-RFID
- CVE-2025-10325Wavlink WL-WN578W2 login.cgi sub_401BA4 command injectionWavlink WL-WN578W2
- CVE-2025-43795Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , Liferay Portal · Liferay DXP +2
- CVE-2025-10324Wavlink WL-WN578W2 firewall.cgi sub_401C5C command injectionWavlink WL-WN578W2
- CVE-2025-10323Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injectionWavlink WL-WN578W2
- CVE-2025-10322Wavlink WL-WN578W2 sysinit.html password recoveryWavlink WL-WN578W2
- CVE-2025-10321Wavlink WL-WN578W2 live_online.shtml information disclosureWavlink WL-WN578W2
- CVE-2025-4234Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of CredentialsPalo Alto Networks Cortex XDR Microsoft 365 Defender Pack
- CVE-2025-43787A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 202Liferay Portal · Liferay DXP +1
- CVE-2025-10320iteachyou Dreamer CMS updatePwd weak passworditeachyou Dreamer CMS
- CVE-2025-39797xfrm: Duplicate SPI HandlingLinux
- CVE-2025-39796net: lapbether: ignore ops-locked netdevsLinux
- CVE-2025-39795block: avoid possible overflow for chunk_sectors check in blk_stack_limits()Linux
- CVE-2025-39794ARM: tegra: Use I/O memcpy to write to IRAMLinux
- CVE-2025-10319JeecgBoot Tenant Log Export exportLog improper authorizationJeecgBoot
- CVE-2025-59058httpsig-rs's HMAC verification is vulnerable to timing attackjunkurihara httpsig-rs · httpsig
- CVE-2025-59139Hono has Body Limit Middleware Bypasshonojs hono · hono
- CVE-2025-10318JeecgBoot WebSocket Message sendWebSocketMsg improper authorizationJeecgBoot
- CVE-2025-6638Regular Expression Denial of Service (ReDoS) in huggingface/transformershuggingface/transformers · transformers
- CVE-2025-27238API hostprototype.get lists data to users with insufficient authorization.Zabbix
- CVE-2025-27233Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.Zabbix
- CVE-2025-10267NewType Infortech｜NUP Portal - Missing AuthenticationNewType Infortech NUP Portal
- CVE-2025-1250Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-6769Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLabGitLab
- CVE-2025-7337Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-8280Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']Contact Form 7 reCAPTCHA
- CVE-2025-3650jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSSjQuery Colorbox
- CVE-2025-58781WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic.Wireless Tsukamoto Co. WTW-EAGLE App for iOS · Wireless Tsu…
- CVE-2025-10291linlinjava litemall cancel WxAftersaleController improper authorizationlinlinjava litemall
- CVE-2025-10148predictable WebSocket maskcurl
- CVE-2025-10288roncoo roncoo-pay list improper authenticationroncoo-pay
- CVE-2025-10094Improper Validation of Specified Quantity in Input in GitLabGitLab
- CVE-2025-10287roncoo roncoo-pay orderQuery direct requestroncoo-pay
- CVE-2025-10278YunaiV ruoyi-vue-pro transfer improper authorizationYunaiV ruoyi-vue-pro
- CVE-2025-9881Ultimate Blogroll <= 2.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingjensg Ultimate Blogroll
- CVE-2025-9877Embed Google Datastudio <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingelangovan Embed Google Datastudio
- CVE-2025-9880Side Slide Responsive Menu <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scriptingdejocar Side Slide Responsive Menu
- CVE-2025-9879Spotify Embed Creator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingslowmove Spotify Embed Creator
- CVE-2025-10277YunaiV yudao-cloud submit improper authorizationYunaiV yudao-cloud
- CVE-2025-43788The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.4 update 81 through Liferay Portal · Liferay DXP +1
- CVE-2025-10276YunaiV ruoyi-vue-pro transfer improper authorizationYunaiV ruoyi-vue-pro
- CVE-2025-43789JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 publishedLiferay Portal · Liferay DXP +1
- CVE-2025-10275YunaiV yudao-cloud transfer improper authorizationYunaiV yudao-cloud
- CVE-2025-10274erjinzhi 10OA item cross site scriptingerjinzhi 10OA
- CVE-2024-45431OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation.
- CVE-2024-45433OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping.
- CVE-2025-45585Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitr
- CVE-2025-52074PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity paramete
- CVE-2025-55996Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
- CVE-2025-56467An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, su