CVEs published September 13, 2025
15 CVEs were published on September 13, 2025: 0 critical, 0 high.
- Published
- 15
- Critical
- 0
- High
- 0
- Medium
- 15
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- MiczFlor RPi-Jukebox-RFID
- 5
- cdevroe unmark
- 2
- Portabilis i-Educar
- 2
- Wavlink WL-WN578W2
- 2
- eCharge Hardy Barth Salia PLCC
- 1
- Shenzhen Sixun Business Management System
- 1
- WhatCD Gazelle
- 1
- yangzongzhuan RuoYi
- 1
Medium, low and unrated 15
- CVE-2025-10384yangzongzhuan RuoYi Role cancelAll improper authorizationyangzongzhuan RuoYi
- CVE-2025-10374Shenzhen Sixun Business Management System OperatorStop improper authorizationShenzhen Sixun Business Management System
- CVE-2025-10373Portabilis i-Educar educar_turma_tipo_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-10372Portabilis i-Educar educar_modulo_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-10371eCharge Hardy Barth Salia PLCC api.php unrestricted uploadeCharge Hardy Barth Salia PLCC
- CVE-2025-10370MiczFlor RPi-Jukebox-RFID userScripts.php cross site scriptingMiczFlor RPi-Jukebox-RFID
- CVE-2025-10369MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scriptingMiczFlor RPi-Jukebox-RFID
- CVE-2025-10368MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scriptingMiczFlor RPi-Jukebox-RFID
- CVE-2025-10367MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scriptingMiczFlor RPi-Jukebox-RFID
- CVE-2025-10366MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scriptingMiczFlor RPi-Jukebox-RFID
- CVE-2025-10359Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injectionWavlink WL-WN578W2
- CVE-2025-10358Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injectionWavlink WL-WN578W2
- CVE-2025-10340WhatCD Gazelle Commit Message change_log.php cross site scriptingWhatCD Gazelle
- CVE-2025-10332cdevroe unmark info.php cross site scriptingcdevroe unmark
- CVE-2025-10331cdevroe unmark Marks.php cross site scriptingcdevroe unmark