# CVEs published 2025-09-12

92 CVEs were published on September 12, 2025: 10 critical, 28 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-10330](https://cve.now/CVE-2025-10330.md): cdevroe unmark searchform.php cross site scripting (CVSS 5.3, cdevroe unmark)
- [CVE-2025-10329](https://cve.now/CVE-2025-10329.md): cdevroe unmark Marks.php server-side request forgery (CVSS 5.3, cdevroe unmark)
- [CVE-2025-10328](https://cve.now/CVE-2025-10328.md): MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection (CVSS 5.3, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10176](https://cve.now/CVE-2025-10176.md): The Hack Repair Guy's Plugin Archiver \<= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion (CVSS 7.2, tvcnet The Hack Repair Guy's Plugin Archiver)
- [CVE-2025-10327](https://cve.now/CVE-2025-10327.md): MiczFlor RPi-Jukebox-RFID shuffle.php os command injection (CVSS 5.3, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10326](https://cve.now/CVE-2025-10326.md): MiczFlor RPi-Jukebox-RFID single.php os command injection (CVSS 5.3, MiczFlor RPi-Jukebox-RFID)
- [CVE-2025-10325](https://cve.now/CVE-2025-10325.md): Wavlink WL-WN578W2 login.cgi sub\_401BA4 command injection (CVSS 5.3, Wavlink WL-WN578W2)
- [CVE-2025-43795](https://cve.now/CVE-2025-43795.md): Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , (CVSS 5.1, Liferay Portal · Liferay DXP +2)
- [CVE-2025-10324](https://cve.now/CVE-2025-10324.md): Wavlink WL-WN578W2 firewall.cgi sub\_401C5C command injection (CVSS 6.9, Wavlink WL-WN578W2)
- [CVE-2025-43796](https://cve.now/CVE-2025-43796.md): Liferay Portal 7.4.0 through 7.4.3.101, and Liferay DXP 2023.Q3.0 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA though update 35 do (CVSS 7.1, Liferay Portal · Liferay DXP +2)
- [CVE-2025-10323](https://cve.now/CVE-2025-10323.md): Wavlink WL-WN578W2 wizard\_rep.shtml sub\_409184 command injection (CVSS 6.9, Wavlink WL-WN578W2)
- [CVE-2025-10322](https://cve.now/CVE-2025-10322.md): Wavlink WL-WN578W2 sysinit.html password recovery (CVSS 6.9, Wavlink WL-WN578W2)
- [CVE-2025-58434](https://cve.now/CVE-2025-58434.md): Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover (CVSS 9.8, FlowiseAI Flowise · flowise)
- [CVE-2025-10321](https://cve.now/CVE-2025-10321.md): Wavlink WL-WN578W2 live\_online.shtml information disclosure (CVSS 6.9, Wavlink WL-WN578W2)
- [CVE-2025-4234](https://cve.now/CVE-2025-4234.md): Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials (CVSS 2.4, Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack)
- [CVE-2025-4235](https://cve.now/CVE-2025-4235.md): User-ID Credential Agent: Cleartext Exposure of Service Account password (CVSS 7.2, Palo Alto Networks User-ID Credential Agent)
- [CVE-2025-43787](https://cve.now/CVE-2025-43787.md): A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 202 (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10320](https://cve.now/CVE-2025-10320.md): iteachyou Dreamer CMS updatePwd weak password (CVSS 2.3, iteachyou Dreamer CMS)
- [CVE-2025-39798](https://cve.now/CVE-2025-39798.md): NFS: Fix the setting of capabilities when automounting a new filesystem (CVSS 7.3, Linux)
- [CVE-2025-39797](https://cve.now/CVE-2025-39797.md): xfrm: Duplicate SPI Handling (no CVSS, Linux)
- [CVE-2025-39796](https://cve.now/CVE-2025-39796.md): net: lapbether: ignore ops-locked netdevs (no CVSS, Linux)
- [CVE-2025-39795](https://cve.now/CVE-2025-39795.md): block: avoid possible overflow for chunk\_sectors check in blk\_stack\_limits() (no CVSS, Linux)
- [CVE-2025-39794](https://cve.now/CVE-2025-39794.md): ARM: tegra: Use I/O memcpy to write to IRAM (no CVSS, Linux)
- [CVE-2025-39793](https://cve.now/CVE-2025-39793.md): io\_uring/memmap: cast nr\_pages to size\_t before shifting (CVSS 7.8, Linux)
- [CVE-2025-39792](https://cve.now/CVE-2025-39792.md): dm: Always split write BIOs to zoned device limits (CVSS 7.8, Linux)
- [CVE-2025-10319](https://cve.now/CVE-2025-10319.md): JeecgBoot Tenant Log Export exportLog improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-10364](https://cve.now/CVE-2025-10364.md): Unauthenticated Arbitrary Command Injection in Evertz SDVN (CVSS 9.3, Evertz 3080ipx-10G · Evertz MViP-II +4)
- [CVE-2025-10365](https://cve.now/CVE-2025-10365.md): Authentication Bypass in Evertz SDVN (CVSS 9.3, Evertz 3080ipx-10G · Evertz MViP-II +4)
- [CVE-2025-9556](https://cve.now/CVE-2025-9556.md): CVE-2025-9556 (CVSS 9.8, Langchaingo)
- [CVE-2025-59058](https://cve.now/CVE-2025-59058.md): httpsig-rs's HMAC verification is vulnerable to timing attack (CVSS 5.9, junkurihara httpsig-rs · httpsig)
- [CVE-2025-59139](https://cve.now/CVE-2025-59139.md): Hono has Body Limit Middleware Bypass (CVSS 5.3, honojs hono · hono)
- [CVE-2025-59054](https://cve.now/CVE-2025-59054.md): dstack has insecure LUKS2 persistent storage partitions that may be opened and used (CVSS 8.5, Dstack-TEE dstack)
- [CVE-2025-10318](https://cve.now/CVE-2025-10318.md): JeecgBoot WebSocket Message sendWebSocketMsg improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-8699](https://cve.now/CVE-2025-8699.md): Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. (CVSS 9.1, KioSoft Stored Value Unattended Payment Solution)
- [CVE-2025-6638](https://cve.now/CVE-2025-6638.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3, huggingface/transformers · transformers)
- [CVE-2025-27240](https://cve.now/CVE-2025-27240.md): Secondary-order SQL injection in Zabbix Server when deleting an autoregistered host (CVSS 7.5, Zabbix)
- [CVE-2025-27238](https://cve.now/CVE-2025-27238.md): API hostprototype.get lists data to users with insufficient authorization. (CVSS 2.1, Zabbix)
- [CVE-2025-27233](https://cve.now/CVE-2025-27233.md): Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later. (CVSS 5.7, Zabbix)
- [CVE-2025-27234](https://cve.now/CVE-2025-27234.md): Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0. (CVSS 7.3, Zabbix)
- [CVE-2025-10267](https://cve.now/CVE-2025-10267.md): NewType Infortech｜NUP Portal - Missing Authentication (CVSS 6.9, NewType Infortech NUP Portal)
- [CVE-2025-10266](https://cve.now/CVE-2025-10266.md): NewType Infortech｜NUP Portal - SQL Injection (CVSS 9.3, NewType Infortech NUP Portal)
- [CVE-2025-10265](https://cve.now/CVE-2025-10265.md): Digiever｜NVR - OS Command Injection (CVSS 8.7, Digiever DS-1200 · Digiever DS-2100 Pro +16)
- [CVE-2025-10264](https://cve.now/CVE-2025-10264.md): Digiever｜NVR - Exposure of Sensitive Information (CVSS 10.0, Digiever DS-1200 · Digiever DS-2100 Pro +16)
- [CVE-2025-7448](https://cve.now/CVE-2025-7448.md): Man in the middle (MitM) attack vulnerability in Wi-SUN library (CVSS 8.6, silabs.com Wi-SUN Stack)
- [CVE-2025-21043](https://cve.now/CVE-2025-21043.md): Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. (CVSS 8.8, KEV, Samsung Mobile Devices)
- [CVE-2025-21042](https://cve.now/CVE-2025-21042.md): Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. (CVSS 8.8, KEV, Samsung Mobile Devices)
- [CVE-2025-1250](https://cve.now/CVE-2025-1250.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-2256](https://cve.now/CVE-2025-2256.md): Improper Validation of Specified Quantity in Input in GitLab (CVSS 7.5, GitLab)
- [CVE-2025-6454](https://cve.now/CVE-2025-6454.md): Server-Side Request Forgery (SSRF) in GitLab (CVSS 8.5, GitLab)
- [CVE-2025-6769](https://cve.now/CVE-2025-6769.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab (CVSS 4.3, GitLab)
- [CVE-2025-7337](https://cve.now/CVE-2025-7337.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-8280](https://cve.now/CVE-2025-8280.md): Contact Form 7 reCAPTCHA \<= 1.2.0 - Reflected XSS via $\_SERVER\['REQUEST\_URI'\] (CVSS 5.8, Contact Form 7 reCAPTCHA)
- [CVE-2025-3650](https://cve.now/CVE-2025-3650.md): jQuery Colorbox \<= 4.6.3 - Contributor+ Stored XSS (CVSS 3.5, jQuery Colorbox)
- [CVE-2025-58781](https://cve.now/CVE-2025-58781.md): WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic. (CVSS 4.8, Wireless Tsukamoto Co. WTW-EAGLE App for iOS · Wireless Tsu…)
- [CVE-2025-10291](https://cve.now/CVE-2025-10291.md): linlinjava litemall cancel WxAftersaleController improper authorization (CVSS 5.3, linlinjava litemall)
- [CVE-2025-8575](https://cve.now/CVE-2025-8575.md): LWS Cleaner \<= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws\_cl\_delete\_file' (CVSS 7.2, aurelienlws LWS Cleaner)
- [CVE-2025-10148](https://cve.now/CVE-2025-10148.md): predictable WebSocket mask (CVSS 5.3, curl)
- [CVE-2025-9086](https://cve.now/CVE-2025-9086.md): Out of bounds read for cookie path (CVSS 7.5, curl)
- [CVE-2025-10288](https://cve.now/CVE-2025-10288.md): roncoo roncoo-pay list improper authentication (CVSS 6.9, roncoo-pay)
- [CVE-2025-10094](https://cve.now/CVE-2025-10094.md): Improper Validation of Specified Quantity in Input in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-10287](https://cve.now/CVE-2025-10287.md): roncoo roncoo-pay orderQuery direct request (CVSS 2.3, roncoo-pay)
- [CVE-2025-10278](https://cve.now/CVE-2025-10278.md): YunaiV ruoyi-vue-pro transfer improper authorization (CVSS 5.3, YunaiV ruoyi-vue-pro)
- [CVE-2025-9881](https://cve.now/CVE-2025-9881.md): Ultimate Blogroll \<= 2.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, jensg Ultimate Blogroll)
- [CVE-2025-9877](https://cve.now/CVE-2025-9877.md): Embed Google Datastudio \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, elangovan Embed Google Datastudio)
- [CVE-2025-9880](https://cve.now/CVE-2025-9880.md): Side Slide Responsive Menu \<= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, dejocar Side Slide Responsive Menu)
- [CVE-2025-9879](https://cve.now/CVE-2025-9879.md): Spotify Embed Creator \<= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, slowmove Spotify Embed Creator)
- [CVE-2025-10277](https://cve.now/CVE-2025-10277.md): YunaiV yudao-cloud submit improper authorization (CVSS 5.3, YunaiV yudao-cloud)
- [CVE-2025-10269](https://cve.now/CVE-2025-10269.md): Spirit Framework \<= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion (CVSS 7.5, Theme-Spirit Spirit Framework)
- [CVE-2025-43788](https://cve.now/CVE-2025-43788.md): The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.4 update 81 through (CVSS 5.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10276](https://cve.now/CVE-2025-10276.md): YunaiV ruoyi-vue-pro transfer improper authorization (CVSS 5.3, YunaiV ruoyi-vue-pro)
- [CVE-2025-43789](https://cve.now/CVE-2025-43789.md): JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published (CVSS 1.0, Liferay Portal · Liferay DXP +1)
- [CVE-2025-9807](https://cve.now/CVE-2025-9807.md): The Events Calendar \<= 6.15.1 - Unauthenticated SQL Injection (CVSS 7.5, stellarwp The Events Calendar)
- [CVE-2025-58754](https://cve.now/CVE-2025-58754.md): Axios is vulnerable to DoS attack through lack of data size check (CVSS 7.5, axios)
- [CVE-2025-10275](https://cve.now/CVE-2025-10275.md): YunaiV yudao-cloud transfer improper authorization (CVSS 5.3, YunaiV yudao-cloud)
- [CVE-2025-55319](https://cve.now/CVE-2025-55319.md): Agentic AI and Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Visual Studio Code)
- [CVE-2025-10274](https://cve.now/CVE-2025-10274.md): erjinzhi 10OA item cross site scripting (CVSS 5.3, erjinzhi 10OA)
- [CVE-2024-45431](https://cve.now/CVE-2024-45431.md): OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. (CVSS 5.3)
- [CVE-2024-45432](https://cve.now/CVE-2024-45432.md): OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. (CVSS 7.5)
- [CVE-2024-45433](https://cve.now/CVE-2024-45433.md): OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. (CVSS 6.5)
- [CVE-2024-45434](https://cve.now/CVE-2024-45434.md): OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. (CVSS 9.8)
- [CVE-2025-45583](https://cve.now/CVE-2025-45583.md): Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the servic (CVSS 9.1)
- [CVE-2025-45584](https://cve.now/CVE-2025-45584.md): Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download car information with (CVSS 7.5)
- [CVE-2025-45585](https://cve.now/CVE-2025-45585.md): Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitr (CVSS 5.4)
- [CVE-2025-45586](https://cve.now/CVE-2025-45586.md): An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a crafted PUT request. (CVSS 7.5)
- [CVE-2025-45587](https://cve.now/CVE-2025-45587.md): A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service (DoS) via a (CVSS 7.0)
- [CVE-2025-52074](https://cve.now/CVE-2025-52074.md): PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity paramete (CVSS 6.1)
- [CVE-2025-55835](https://cve.now/CVE-2025-55835.md): File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering. (CVSS 9.8)
- [CVE-2025-55996](https://cve.now/CVE-2025-55996.md): Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface (CVSS 6.3)
- [CVE-2025-56467](https://cve.now/CVE-2025-56467.md): An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, su (CVSS 6.5)
- [CVE-2025-57577](https://cve.now/CVE-2025-57577.md): An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. (CVSS 8.0)
- [CVE-2025-57578](https://cve.now/CVE-2025-57578.md): An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password (CVSS 8.0)
- [CVE-2025-57579](https://cve.now/CVE-2025-57579.md): An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default passwo (CVSS 8.0)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.