# CVEs published 2025-09-16

231 CVEs were published on September 16, 2025: 22 critical, 70 high. Days are UTC.

- [CVE-2025-37125](https://cve.now/CVE-2025-37125.md): Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37123](https://cve.now/CVE-2025-37123.md): Authenticated Command Injection leads to Unauthorized Actions in CLI Interface (CVSS 8.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37124](https://cve.now/CVE-2025-37124.md): Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface (CVSS 8.6, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-43804](https://cve.now/CVE-2025-43804.md): Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2025-37128](https://cve.now/CVE-2025-37128.md): Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS (CVSS 6.8, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37129](https://cve.now/CVE-2025-37129.md): Authenticated Remote Code Execution allows Exploit in Scripts Feature (CVSS 6.7, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37127](https://cve.now/CVE-2025-37127.md): Authenticated Replay Attack contains Cryptographic Vulnerability (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37130](https://cve.now/CVE-2025-37130.md): Unrestricted Binary allows File Enumeration in Underlying Operating System (CVSS 6.5, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37126](https://cve.now/CVE-2025-37126.md): Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-37131](https://cve.now/CVE-2025-37131.md): Authenticated Arbitrary File Read allows Data Exposure in CLI Interface (CVSS 4.9, Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeC…)
- [CVE-2025-43805](https://cve.now/CVE-2025-43805.md): Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10566](https://cve.now/CVE-2025-10566.md): Campcodes Grocery Sales and Inventory System index.php cross site scripting (CVSS 5.3, Campcodes Grocery Sales and Inventory System)
- [CVE-2025-9708](https://cve.now/CVE-2025-9708.md): Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks (CVSS 6.8, Kubernetes CSharp Client · KubernetesClient)
- [CVE-2025-10565](https://cve.now/CVE-2025-10565.md): Campcodes Grocery Sales and Inventory System ajax.php sql injection (CVSS 6.9, Campcodes Grocery Sales and Inventory System)
- [CVE-2025-10564](https://cve.now/CVE-2025-10564.md): Campcodes Grocery Sales and Inventory System ajax.php sql injection (CVSS 6.9, Campcodes Grocery Sales and Inventory System)
- [CVE-2025-10563](https://cve.now/CVE-2025-10563.md): Campcodes Grocery Sales and Inventory System ajax.php sql injection (CVSS 6.9, Campcodes Grocery Sales and Inventory System)
- [CVE-2025-34187](https://cve.now/CVE-2025-34187.md): Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell (CVSS 9.3, Ilevia Srl. EVE X1/X5 Server)
- [CVE-2025-34186](https://cve.now/CVE-2025-34186.md): Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass (CVSS 9.3, Ilevia Srl. EVE X1/X5 Server)
- [CVE-2025-34185](https://cve.now/CVE-2025-34185.md): Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated File Disclosure (CVSS 8.7, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34184](https://cve.now/CVE-2025-34184.md): Ilevia EVE X1 Server 4.7.18.0.eden Neuro-Core Unauthenticated Code Injection (CVSS 9.3, Ilevia Srl. EVE X1 Server)
- [CVE-2025-34183](https://cve.now/CVE-2025-34183.md): Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure (CVSS 9.3, Ilevia Srl. EVE X1 Server)
- [CVE-2025-10562](https://cve.now/CVE-2025-10562.md): Campcodes Grocery Sales and Inventory System ajax.php sql injection (CVSS 6.9, Campcodes Grocery Sales and Inventory System)
- [CVE-2025-49728](https://cve.now/CVE-2025-49728.md): Microsoft PC Manager Security Feature Bypass Vulnerability (CVSS 4.0, Microsoft PC Manager)
- [CVE-2025-47967](https://cve.now/CVE-2025-47967.md): Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.7, Microsoft Edge)
- [CVE-2025-54237](https://cve.now/CVE-2025-54237.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Stager)
- [CVE-2025-54262](https://cve.now/CVE-2025-54262.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 7.8, Adobe Substance3D - Stager)
- [CVE-2025-59336](https://cve.now/CVE-2025-59336.md): Relative Path Traversal in Luanox (CVSS 6.9, lumen-oss luanox)
- [CVE-2025-59334](https://cve.now/CVE-2025-59334.md): Linkr allows manifest tampering leading to arbitrary file injection (CVSS 9.7, mohammadzain2008 Linkr)
- [CVE-2025-59161](https://cve.now/CVE-2025-59161.md): In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left (CVSS 2.7, element-hq element-web)
- [CVE-2025-10492](https://cve.now/CVE-2025-10492.md): Jaspersoft Library Deserialisation Vulnerability (CVSS 8.7, Jaspersoft JasperReports Library Community Edition · Jas… +7)
- [CVE-2025-59160](https://cve.now/CVE-2025-59160.md): matrix-js-sdk has insufficient validation when considering a room to be upgraded by another (CVSS 2.7, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2025-58174](https://cve.now/CVE-2025-58174.md): LAM profile editor stored cross-site scripting vulnerability (CVSS 4.6, LDAPAccountManager lam)
- [CVE-2025-59050](https://cve.now/CVE-2025-59050.md): Greenshot — Insecure .NET deserialization via WM\_COPYDATA enables local code execution (CVSS 8.4, greenshot)
- [CVE-2023-53334](https://cve.now/CVE-2023-53334.md): USB: chipidea: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53333](https://cve.now/CVE-2023-53333.md): netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (CVSS 8.2, Linux)
- [CVE-2023-53332](https://cve.now/CVE-2023-53332.md): genirq/ipi: Fix NULL pointer deref in irq\_data\_get\_affinity\_mask() (CVSS 5.5, Linux)
- [CVE-2023-53331](https://cve.now/CVE-2023-53331.md): pstore/ram: Check start of empty przs during init (CVSS 7.8, Linux)
- [CVE-2023-53330](https://cve.now/CVE-2023-53330.md): caif: fix memory leak in cfctrl\_linkup\_request() (CVSS 5.5, Linux)
- [CVE-2023-53329](https://cve.now/CVE-2023-53329.md): workqueue: fix data race with the pwq-\>stats\[\] increment (CVSS 4.7, Linux)
- [CVE-2023-53328](https://cve.now/CVE-2023-53328.md): fs/ntfs3: Enhance sanity check while generating attr\_list (CVSS 5.5, Linux)
- [CVE-2023-53327](https://cve.now/CVE-2023-53327.md): iommufd/selftest: Catch overflow of uptr and length (CVSS 5.5, Linux)
- [CVE-2023-53326](https://cve.now/CVE-2023-53326.md): powerpc: Don't try to copy PPR for task with NULL pt\_regs (CVSS 5.5, Linux)
- [CVE-2023-53325](https://cve.now/CVE-2023-53325.md): drm/mediatek: dp: Change logging to dev for mtk\_dp\_aux\_transfer() (CVSS 5.5, Linux)
- [CVE-2023-53324](https://cve.now/CVE-2023-53324.md): drm/msm/mdp5: Don't leak some plane state (CVSS 5.5, Linux)
- [CVE-2023-53323](https://cve.now/CVE-2023-53323.md): ext2/dax: Fix ext2\_setsize when len is page aligned (CVSS 5.5, Linux)
- [CVE-2023-53322](https://cve.now/CVE-2023-53322.md): scsi: qla2xxx: Wait for io return on terminate rport (CVSS 8.8, Linux)
- [CVE-2023-53321](https://cve.now/CVE-2023-53321.md): wifi: mac80211\_hwsim: drop short frames (CVSS 7.1, Linux)
- [CVE-2023-53320](https://cve.now/CVE-2023-53320.md): scsi: mpi3mr: Fix issues in mpi3mr\_get\_all\_tgt\_info() (CVSS 7.8, Linux)
- [CVE-2023-53319](https://cve.now/CVE-2023-53319.md): KVM: arm64: Handle kvm\_arm\_init failure correctly in finalize\_pkvm (CVSS 5.5, Linux)
- [CVE-2023-53318](https://cve.now/CVE-2023-53318.md): recordmcount: Fix memory leaks in the uwrite function (CVSS 5.5, Linux)
- [CVE-2023-53317](https://cve.now/CVE-2023-53317.md): ext4: fix WARNING in mb\_find\_extent (CVSS 5.5, Linux)
- [CVE-2023-53316](https://cve.now/CVE-2023-53316.md): drm/msm/dp: Free resources after unregistering them (CVSS 7.8, Linux)
- [CVE-2023-53315](https://cve.now/CVE-2023-53315.md): wifi: ath11k: Fix SKB corruption in REO destination ring (CVSS 8.8, Linux)
- [CVE-2023-53314](https://cve.now/CVE-2023-53314.md): fbdev/ep93xx-fb: Do not assign to struct fb\_info.dev (CVSS 7.8, Linux)
- [CVE-2023-53313](https://cve.now/CVE-2023-53313.md): md/raid10: fix wrong setting of max\_corr\_read\_errors (CVSS 5.5, Linux)
- [CVE-2023-53312](https://cve.now/CVE-2023-53312.md): net: fix net\_dev\_start\_xmit trace event vs skb\_transport\_offset() (CVSS 5.5, Linux)
- [CVE-2023-53311](https://cve.now/CVE-2023-53311.md): nilfs2: fix use-after-free of nilfs\_root in dirtying inodes via iput (CVSS 7.8, Linux)
- [CVE-2023-53310](https://cve.now/CVE-2023-53310.md): power: supply: axp288\_fuel\_gauge: Fix external\_power\_changed race (CVSS 4.7, Linux)
- [CVE-2023-53309](https://cve.now/CVE-2023-53309.md): drm/radeon: Fix integer overflow in radeon\_cs\_parser\_init (CVSS 5.5, Linux)
- [CVE-2023-53308](https://cve.now/CVE-2023-53308.md): net: fec: Better handle pm\_runtime\_get() failing in .remove() (CVSS 7.8, Linux)
- [CVE-2023-53307](https://cve.now/CVE-2023-53307.md): rbd: avoid use-after-free in do\_rbd\_add() when rbd\_dev\_create() fails (CVSS 7.8, Linux)
- [CVE-2023-53306](https://cve.now/CVE-2023-53306.md): fsdax: force clear dirty mark if CoW (CVSS 5.5, Linux)
- [CVE-2023-53305](https://cve.now/CVE-2023-53305.md): Bluetooth: L2CAP: Fix use-after-free (CVSS 8.8, Linux)
- [CVE-2023-53304](https://cve.now/CVE-2023-53304.md): netfilter: nft\_set\_rbtree: fix overlap expiration walk (CVSS 5.5, Linux)
- [CVE-2022-50352](https://cve.now/CVE-2022-50352.md): net: hns: fix possible memory leak in hnae\_ae\_register() (CVSS 5.5, Linux)
- [CVE-2022-50351](https://cve.now/CVE-2022-50351.md): cifs: Fix xid leak in cifs\_create() (CVSS 5.5, Linux)
- [CVE-2022-50350](https://cve.now/CVE-2022-50350.md): scsi: target: iscsi: Fix a race condition between login\_work and the login thread (CVSS 9.8, Linux)
- [CVE-2022-50349](https://cve.now/CVE-2022-50349.md): misc: tifm: fix possible memory leak in tifm\_7xx1\_switch\_media() (CVSS 5.5, Linux)
- [CVE-2022-50348](https://cve.now/CVE-2022-50348.md): nfsd: Fix a memory leak in an error handling path (CVSS 5.5, Linux)
- [CVE-2022-50347](https://cve.now/CVE-2022-50347.md): mmc: rtsx\_usb\_sdmmc: fix return value check of mmc\_add\_host() (CVSS 5.5, Linux)
- [CVE-2022-50346](https://cve.now/CVE-2022-50346.md): ext4: init quota for 'old.inode' in 'ext4\_rename' (CVSS 5.5, Linux)
- [CVE-2022-50344](https://cve.now/CVE-2022-50344.md): ext4: fix null-ptr-deref in ext4\_write\_info (CVSS 5.5, Linux)
- [CVE-2022-50343](https://cve.now/CVE-2022-50343.md): rapidio: fix possible name leaks when rio\_add\_device() fails (CVSS 5.5, Linux)
- [CVE-2022-50342](https://cve.now/CVE-2022-50342.md): floppy: Fix memory leak in do\_floppy\_init() (CVSS 5.5, Linux)
- [CVE-2022-50341](https://cve.now/CVE-2022-50341.md): cifs: fix oops during encryption (CVSS 7.8, Linux)
- [CVE-2022-50340](https://cve.now/CVE-2022-50340.md): media: vimc: Fix wrong function called when vimc\_init() fails (CVSS 5.5, Linux)
- [CVE-2022-50339](https://cve.now/CVE-2022-50339.md): Bluetooth: avoid hci\_dev\_test\_and\_set\_flag() in mgmt\_init\_hdev() (CVSS 7.8, Linux)
- [CVE-2025-43801](https://cve.now/CVE-2025-43801.md): Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and L (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-58749](https://cve.now/CVE-2025-58749.md): WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode (CVSS 2.1, bytecodealliance wasm-micro-runtime)
- [CVE-2025-41243](https://cve.now/CVE-2025-41243.md): Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux (CVSS 10.0, Spring Cloud Gateway · org.springframework.cloud:spring-clo…)
- [CVE-2025-4953](https://cve.now/CVE-2025-4953.md): Podman: build context bind mount (CVSS 7.4, podman · Red Hat Enterprise Linux +6)
- [CVE-2025-59270](https://cve.now/CVE-2025-59270.md): psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse (CVSS 3.1, pspete psPAS)
- [CVE-2025-36244](https://cve.now/CVE-2025-36244.md): IBM AIX privilege escalation (CVSS 7.4, IBM AIX · IBM VIOS)
- [CVE-2009-20007](https://cve.now/CVE-2009-20007.md): Talkative IRC v0.4.4.16 Response Buffer Overflow (CVSS 9.3, Talkative IRC)
- [CVE-2009-20006](https://cve.now/CVE-2009-20006.md): osCommerce \<= 2.2 Admin File Manager Arbitrary PHP Code Execution (CVSS 9.3, osCommerce)
- [CVE-2009-20005](https://cve.now/CVE-2009-20005.md): InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow (CVSS 9.3, InterSystems Caché)
- [CVE-2024-13174](https://cve.now/CVE-2024-13174.md): SQLi in E1 Informatics' Web Application (CVSS 8.6, E1 Informatics Web Application)
- [CVE-2025-8894](https://cve.now/CVE-2025-8894.md): PDF File Parsing Heap-Based Buffer Overflow Vulnerability (CVSS 7.8, Autodesk Revit · Autodesk AutoCAD +2)
- [CVE-2025-59333](https://cve.now/CVE-2025-59333.md): @executeautomation/database-server does not properly restrict access, bypassing a "read-only" mode (CVSS 8.1, executeautomation mcp-database-server · @executeautomation/…)
- [CVE-2025-8893](https://cve.now/CVE-2025-8893.md): PDF File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk Revit · Autodesk AutoCAD +2)
- [CVE-2024-13149](https://cve.now/CVE-2024-13149.md): SQLi in Arma Store's Armalife (CVSS 9.8, Arma Store Armalife)
- [CVE-2025-8057](https://cve.now/CVE-2025-8057.md): IDOR in Patika Global Technologies' HumanSuite (CVSS 6.5, Patika Global Technologies HumanSuite)
- [CVE-2025-8276](https://cve.now/CVE-2025-8276.md): HTML Injection in Patika Global Technologies' HumanSuite (CVSS 4.3, Patika Global Technologies HumanSuite)
- [CVE-2024-12796](https://cve.now/CVE-2024-12796.md): Reflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP (CVSS 5.3, Holistic IT, Consultancy Coop. Workcube ERP)
- [CVE-2025-39836](https://cve.now/CVE-2025-39836.md): efi: stmm: Fix incorrect buffer allocation method (CVSS 7.8, Linux)
- [CVE-2025-39835](https://cve.now/CVE-2025-39835.md): xfs: do not propagate ENODATA disk errors into xattr code (no CVSS, Linux)
- [CVE-2025-39834](https://cve.now/CVE-2025-39834.md): net/mlx5: HWS, Fix memory leak in hws\_action\_get\_shared\_stc\_nic error flow (CVSS 5.5, Linux)
- [CVE-2025-39833](https://cve.now/CVE-2025-39833.md): mISDN: hfcpci: Fix warning when deleting uninitialized timer (CVSS 5.5, Linux)
- [CVE-2025-39832](https://cve.now/CVE-2025-39832.md): net/mlx5: Fix lockdep assertion on sync reset unload event (CVSS 5.5, Linux)
- [CVE-2025-39831](https://cve.now/CVE-2025-39831.md): fbnic: Move phylink resume out of service\_task and into open/close (CVSS 5.5, Linux)
- [CVE-2025-39830](https://cve.now/CVE-2025-39830.md): net/mlx5: HWS, Fix memory leak in hws\_pool\_buddy\_init error path (CVSS 5.5, Linux)
- [CVE-2025-39829](https://cve.now/CVE-2025-39829.md): trace/fgraph: Fix the warning caused by missing unregister notifier (CVSS 5.5, Linux)
- [CVE-2025-39828](https://cve.now/CVE-2025-39828.md): atm: atmtcp: Prevent arbitrary write in atmtcp\_recv\_control(). (no CVSS, Linux)
- [CVE-2025-39827](https://cve.now/CVE-2025-39827.md): net: rose: include node references in rose\_neigh refcount (CVSS 8.8, Linux)
- [CVE-2025-39826](https://cve.now/CVE-2025-39826.md): net: rose: convert 'use' field to refcount\_t (CVSS 8.8, Linux)
- [CVE-2025-39825](https://cve.now/CVE-2025-39825.md): smb: client: fix race with concurrent opens in rename(2) (CVSS 7.8, Linux)
- [CVE-2025-39824](https://cve.now/CVE-2025-39824.md): HID: asus: fix UAF via HID\_CLAIMED\_INPUT validation (no CVSS, Linux)
- [CVE-2025-39823](https://cve.now/CVE-2025-39823.md): KVM: x86: use array\_index\_nospec with indices that come from guest (no CVSS, Linux)
- [CVE-2025-39822](https://cve.now/CVE-2025-39822.md): io\_uring/kbuf: fix signedness in this\_len calculation (CVSS 5.5, Linux)
- [CVE-2025-39821](https://cve.now/CVE-2025-39821.md): perf: Avoid undefined behavior from stopping/starting inactive events (CVSS 7.8, Linux)
- [CVE-2025-39820](https://cve.now/CVE-2025-39820.md): drm/msm/dpu: Add a null ptr check for dpu\_encoder\_needs\_modeset (CVSS 5.5, Linux)
- [CVE-2025-39819](https://cve.now/CVE-2025-39819.md): fs/smb: Fix inconsistent refcnt update (no CVSS, Linux)
- [CVE-2025-39818](https://cve.now/CVE-2025-39818.md): HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVSS 7.8, Linux)
- [CVE-2025-39817](https://cve.now/CVE-2025-39817.md): efivarfs: Fix slab-out-of-bounds in efivarfs\_d\_compare (CVSS 7.1, Linux)
- [CVE-2025-39816](https://cve.now/CVE-2025-39816.md): io\_uring/kbuf: always use READ\_ONCE() to read ring provided buffer lengths (CVSS 5.5, Linux)
- [CVE-2025-39815](https://cve.now/CVE-2025-39815.md): RISC-V: KVM: fix stack overrun when loading vlenb (CVSS 7.8, Linux)
- [CVE-2025-39814](https://cve.now/CVE-2025-39814.md): ice: fix NULL pointer dereference in ice\_unplug\_aux\_dev() on reset (CVSS 5.5, Linux)
- [CVE-2025-39813](https://cve.now/CVE-2025-39813.md): ftrace: Fix potential warning in trace\_printk\_seq during ftrace\_dump (no CVSS, Linux)
- [CVE-2025-39812](https://cve.now/CVE-2025-39812.md): sctp: initialize more fields in sctp\_v6\_from\_sk() (no CVSS, Linux)
- [CVE-2025-39811](https://cve.now/CVE-2025-39811.md): drm/xe/vm: Clear the scratch\_pt pointer on error (CVSS 5.5, Linux)
- [CVE-2025-39810](https://cve.now/CVE-2025-39810.md): bnxt\_en: Fix memory corruption when FW resources change during ifdown (CVSS 7.8, Linux)
- [CVE-2025-39809](https://cve.now/CVE-2025-39809.md): HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length (CVSS 8.4, Linux)
- [CVE-2025-39808](https://cve.now/CVE-2025-39808.md): HID: hid-ntrig: fix unable to handle page fault in ntrig\_report\_version() (no CVSS, Linux)
- [CVE-2025-39807](https://cve.now/CVE-2025-39807.md): drm/mediatek: Add error handling for old state CRTC in atomic\_disable (CVSS 5.5, Linux)
- [CVE-2025-39806](https://cve.now/CVE-2025-39806.md): HID: multitouch: fix slab out-of-bounds access in mt\_report\_fixup() (CVSS 8.8, Linux)
- [CVE-2025-39805](https://cve.now/CVE-2025-39805.md): net: macb: fix unregister\_netdev call order in macb\_remove() (no CVSS, Linux)
- [CVE-2025-7355](https://cve.now/CVE-2025-7355.md): IDOR in Beefull Energy Technologies' Beefull App (CVSS 6.5, Beefull Energy Technologies Beefull App)
- [CVE-2025-10290](https://cve.now/CVE-2025-10290.md): Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites (CVSS 6.5, Mozilla Focus for iOS)
- [CVE-2025-10535](https://cve.now/CVE-2025-10535.md): Information disclosure, mitigation bypass in the Privacy component in Firefox for Android (CVSS 7.5, Mozilla Firefox)
- [CVE-2025-10534](https://cve.now/CVE-2025-10534.md): Spoofing issue in the Site Permissions component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10531](https://cve.now/CVE-2025-10531.md): Mitigation bypass in the Web Compatibility: Tooling component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10530](https://cve.now/CVE-2025-10530.md): Spoofing issue in the WebAuthn component in Firefox for Android (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10537](https://cve.now/CVE-2025-10537.md): Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143 (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10536](https://cve.now/CVE-2025-10536.md): Information disclosure in the Networking: Cache component (CVSS 6.2, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10532](https://cve.now/CVE-2025-10532.md): Incorrect boundary conditions in the JavaScript: GC component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10529](https://cve.now/CVE-2025-10529.md): Same-origin policy bypass in the Layout component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10528](https://cve.now/CVE-2025-10528.md): Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component (CVSS 7.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10527](https://cve.now/CVE-2025-10527.md): Sandbox escape due to use-after-free in the Graphics: Canvas2D component (CVSS 7.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-10533](https://cve.now/CVE-2025-10533.md): Integer overflow in the SVG component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-55118](https://cve.now/CVE-2025-55118.md): BMC Control-M/Agent memory corruption in SSL/TLS communication (CVSS 8.4, BMC Control-M/Agent)
- [CVE-2025-55117](https://cve.now/CVE-2025-55117.md): BMC Control-M/Agent buffer overflow in SSL/TLS communication (CVSS 6.3, BMC Control-M/Agent)
- [CVE-2025-55116](https://cve.now/CVE-2025-55116.md): BMC Control-M/Agent buffer overflow local privilege escalation (CVSS 9.3, BMC Control-M/Agent)
- [CVE-2025-55115](https://cve.now/CVE-2025-55115.md): BMC Control-M/Agent path traversal local privilege escalation (CVSS 9.3, BMC Control-M/Agent)
- [CVE-2025-55114](https://cve.now/CVE-2025-55114.md): BMC Control-M/Agent improper IP address filtering order (CVSS 6.9, BMC Control-M/Agent)
- [CVE-2025-55113](https://cve.now/CVE-2025-55113.md): BMC Control-M/Agent unescaped NULL byte in access control list checks (CVSS 9.5, BMC Control-M/Agent)
- [CVE-2025-55112](https://cve.now/CVE-2025-55112.md): BMC Control-M/Agent hardcoded Blowfish keys (CVSS 7.6, BMC Control-M/Agent)
- [CVE-2025-10546](https://cve.now/CVE-2025-10546.md): Cross-Site Scripting (XSS) Vulnerability in PPC XPON ONT Wi-Fi Router (CVSS 5.1, PPC Technologies PPC XPON ONT (Optical Network Terminal) 2K…)
- [CVE-2025-55111](https://cve.now/CVE-2025-55111.md): BMC Control-M/Agent insecure default file permissions (CVSS 5.7, BMC Control-M/Agent)
- [CVE-2025-55110](https://cve.now/CVE-2025-55110.md): BMC Control-M/Agent hardcoded default keystore password (CVSS 5.7, BMC Control-M/Agent)
- [CVE-2025-55109](https://cve.now/CVE-2025-55109.md): BMC Control-M/Agent default SSL/TLS configuration authenticated bypass (CVSS 9.5, BMC Control-M/Agent)
- [CVE-2025-7743](https://cve.now/CVE-2025-7743.md): Sensitive Data Exposure in Dolusoft's Omaspot (CVSS 9.6, Dolusoft Omaspot)
- [CVE-2025-7744](https://cve.now/CVE-2025-7744.md): SQLi in Dolusoft's Omaspot (CVSS 9.8, Dolusoft Omaspot)
- [CVE-2025-6575](https://cve.now/CVE-2025-6575.md): XSS in Dolusoft's Omaspot (CVSS 5.4, Dolusoft Omaspot)
- [CVE-2024-12913](https://cve.now/CVE-2024-12913.md): SQLi in Megatek Communication System's Azora Wireless Network Management (CVSS 8.8, Megatek Communication System Azora Wireless Network Managem…)
- [CVE-2025-8446](https://cve.now/CVE-2025-8446.md): Blaze Demo Importer \<= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install (CVSS 4.3, blazethemes Blaze Demo Importer)
- [CVE-2025-41249](https://cve.now/CVE-2025-41249.md): CVE-2025-41249: Spring Framework Annotation Detection Vulnerability (CVSS 7.5, VMware Spring Framework · org.springframework:spring-core)
- [CVE-2025-41248](https://cve.now/CVE-2025-41248.md): CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types (CVSS 7.5, VMware Spring Security · org.springframework.security:sprin…)
- [CVE-2025-10016](https://cve.now/CVE-2025-10016.md): Local Privilege Escalation in Sparkle Autoupdate Daemon (CVSS 8.8, Sparkle Project Sparkle)
- [CVE-2025-10015](https://cve.now/CVE-2025-10015.md): TCC Bypass via Downloader XPC Service in Sparkle (CVSS 4.8, Sparkle Project Sparkle)
- [CVE-2025-26711](https://cve.now/CVE-2025-26711.md): There is an unauthorized access vulnerability in ZTE T5400. (CVSS 5.7, ZTE T5400)
- [CVE-2025-26710](https://cve.now/CVE-2025-26710.md): There is an an information disclosure vulnerability in ZTE T5400. (CVSS 3.5, ZTE T5400)
- [CVE-2025-10316](https://cve.now/CVE-2025-10316.md): Cross-Site Scripting in extension "Form to Database" (form\_to\_database) (CVSS 2.3, TYPO3 Extension "Form to Database" · lavitto/typo3-form-to-…)
- [CVE-2025-4688](https://cve.now/CVE-2025-4688.md): SQLi in BGS Interactive's SINAV.LINK Exam Result Module (CVSS 9.8, BGS Interactive SINAV.LINK Exam Result Module)
- [CVE-2025-2404](https://cve.now/CVE-2025-2404.md): XSS in Ubit Information Technologies' STOYS (CVSS 4.3, Ubit Information Technologies STOYS)
- [CVE-2023-53303](https://cve.now/CVE-2023-53303.md): net: microchip: vcap api: Fix possible memory leak for vcap\_dup\_rule() (CVSS 5.5, Linux)
- [CVE-2023-53302](https://cve.now/CVE-2023-53302.md): wifi: iwl4965: Add missing check for create\_singlethread\_workqueue() (CVSS 5.5, Linux)
- [CVE-2023-53301](https://cve.now/CVE-2023-53301.md): f2fs: fix kernel crash due to null io-\>bio (no CVSS, Linux)
- [CVE-2023-53300](https://cve.now/CVE-2023-53300.md): media: hi846: Fix memleak in hi846\_init\_controls() (CVSS 5.5, Linux)
- [CVE-2023-53299](https://cve.now/CVE-2023-53299.md): md/raid10: fix leak of 'r10bio-\>remaining' for recovery (CVSS 5.5, Linux)
- [CVE-2023-53298](https://cve.now/CVE-2023-53298.md): nfc: fix memory leak of se\_io context in nfc\_genl\_se\_io (CVSS 5.5, Linux)
- [CVE-2023-53297](https://cve.now/CVE-2023-53297.md): Bluetooth: L2CAP: fix "bad unlock balance" in l2cap\_disconnect\_rsp (CVSS 8.8, Linux)
- [CVE-2023-53296](https://cve.now/CVE-2023-53296.md): sctp: check send stream number after wait\_for\_sndbuf (CVSS 5.5, Linux)
- [CVE-2023-53295](https://cve.now/CVE-2023-53295.md): udf: Do not update file length for failed writes to inline files (CVSS 5.5, Linux)
- [CVE-2023-53294](https://cve.now/CVE-2023-53294.md): fs/ntfs3: Fix null-ptr-deref on inode-\>i\_op in ntfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53292](https://cve.now/CVE-2023-53292.md): blk-mq: fix NULL dereference on q-\>elevator in blk\_mq\_elv\_switch\_none (CVSS 5.5, Linux)
- [CVE-2023-53291](https://cve.now/CVE-2023-53291.md): rcu/rcuscale: Stop kfree\_scale\_thread thread(s) after unloading rcuscale (CVSS 5.5, Linux)
- [CVE-2023-53290](https://cve.now/CVE-2023-53290.md): samples/bpf: Fix fout leak in hbm's run\_bpf\_prog (CVSS 5.5, Linux)
- [CVE-2023-53289](https://cve.now/CVE-2023-53289.md): media: bdisp: Add missing check for create\_workqueue (CVSS 5.5, Linux)
- [CVE-2023-53288](https://cve.now/CVE-2023-53288.md): drm/client: Fix memory leak in drm\_client\_modeset\_probe (CVSS 5.5, Linux)
- [CVE-2023-53287](https://cve.now/CVE-2023-53287.md): usb: cdns3: Put the cdns set active part outside the spin lock (CVSS 5.5, Linux)
- [CVE-2023-53286](https://cve.now/CVE-2023-53286.md): RDMA/mlx5: Return the firmware result upon destroying QP/RQ (CVSS 7.8, Linux)
- [CVE-2023-53285](https://cve.now/CVE-2023-53285.md): ext4: add bounds checking in get\_max\_inline\_xattr\_value\_size() (CVSS 7.1, Linux)
- [CVE-2023-53284](https://cve.now/CVE-2023-53284.md): drm/msm/dpu: check for null return of devm\_kzalloc() in dpu\_writeback\_init() (CVSS 5.5, Linux)
- [CVE-2023-53282](https://cve.now/CVE-2023-53282.md): scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (CVSS 7.8, Linux)
- [CVE-2023-53281](https://cve.now/CVE-2023-53281.md): drivers: staging: rtl8723bs: Fix locking in \_rtw\_join\_timeout\_handler() (CVSS 5.5, Linux)
- [CVE-2023-53280](https://cve.now/CVE-2023-53280.md): scsi: qla2xxx: Remove unused nvme\_ls\_waitq wait queue (CVSS 5.5, Linux)
- [CVE-2023-53279](https://cve.now/CVE-2023-53279.md): misc: vmw\_balloon: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53278](https://cve.now/CVE-2023-53278.md): ubifs: Fix memory leak in ubifs\_sysfs\_init() (CVSS 5.5, Linux)
- [CVE-2023-53277](https://cve.now/CVE-2023-53277.md): wifi: iwl3945: Add missing check for create\_singlethread\_workqueue (CVSS 5.5, Linux)
- [CVE-2023-53276](https://cve.now/CVE-2023-53276.md): ubifs: Free memory for tmpfile name (CVSS 5.5, Linux)
- [CVE-2023-53275](https://cve.now/CVE-2023-53275.md): ALSA: hda: fix a possible null-pointer dereference due to data race in snd\_hdac\_regmap\_sync() (CVSS 5.5, Linux)
- [CVE-2023-53274](https://cve.now/CVE-2023-53274.md): clk: mediatek: mt8183: Add back SSPM related clocks (CVSS 7.8, Linux)
- [CVE-2023-53273](https://cve.now/CVE-2023-53273.md): Drivers: vmbus: Check for channel allocation before looking up relids (CVSS 5.5, Linux)
- [CVE-2023-53272](https://cve.now/CVE-2023-53272.md): net: ena: fix shift-out-of-bounds in exponential backoff (CVSS 7.1, Linux)
- [CVE-2023-53271](https://cve.now/CVE-2023-53271.md): ubi: Fix unreferenced object reported by kmemleak in ubi\_resize\_volume() (CVSS 5.5, Linux)
- [CVE-2023-53270](https://cve.now/CVE-2023-53270.md): ext4: fix i\_disksize exceeding i\_size problem in paritally written case (CVSS 5.5, Linux)
- [CVE-2023-53269](https://cve.now/CVE-2023-53269.md): block: ublk: make sure that block size is set correctly (CVSS 5.5, Linux)
- [CVE-2023-53268](https://cve.now/CVE-2023-53268.md): ASoC: fsl\_mqs: move of\_node\_put() to the correct location (CVSS 5.5, Linux)
- [CVE-2023-53267](https://cve.now/CVE-2023-53267.md): driver: soc: xilinx: fix memory leak in xlnx\_add\_cb\_for\_notify\_event() (CVSS 5.5, Linux)
- [CVE-2023-53266](https://cve.now/CVE-2023-53266.md): arm64: acpi: Fix possible memory leak of ffh\_ctxt (CVSS 5.5, Linux)
- [CVE-2023-53265](https://cve.now/CVE-2023-53265.md): ubi: ensure that VID header offset + VID header size \<= alloc, size (CVSS 7.1, Linux)
- [CVE-2023-53264](https://cve.now/CVE-2023-53264.md): clk: imx: clk-imxrt1050: fix memory leak in imxrt1050\_clocks\_probe (CVSS 5.5, Linux)
- [CVE-2023-53263](https://cve.now/CVE-2023-53263.md): drm/nouveau/disp: fix use-after-free in error handling of nouveau\_connector\_create (CVSS 7.8, Linux)
- [CVE-2025-5519](https://cve.now/CVE-2025-5519.md): Information Disclosure in ArgusTech's BILGER (CVSS 6.5, ArgusTech BILGER)
- [CVE-2025-5518](https://cve.now/CVE-2025-5518.md): IDOR in ArgusTech's BILGER (CVSS 6.5, ArgusTech BILGER)
- [CVE-2024-12367](https://cve.now/CVE-2024-12367.md): Information Disclosure in Vegagrup Software's Vega Master (CVSS 8.6, Vegagrup Software Vega Master)
- [CVE-2025-9808](https://cve.now/CVE-2025-9808.md): The Events Calendar \<= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure (CVSS 5.3, stellarwp The Events Calendar)
- [CVE-2025-30075](https://cve.now/CVE-2025-30075.md): In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they (CVSS 2.2, Alludo MindManager)
- [CVE-2025-44034](https://cve.now/CVE-2025-44034.md): SQL injection vulnerability in oa\_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/ (CVSS 8.0)
- [CVE-2025-52044](https://cve.now/CVE-2025-52044.md): In Frappe ERPNext v15.57.5, the function get\_stock\_balance() at erpnext/stock/utils.py is vulnerable to SQL Injection, which allows an attac (CVSS 7.5)
- [CVE-2025-54391](https://cve.now/CVE-2025-54391.md): A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) allows an attacker with valid user credentials (CVSS 9.1)
- [CVE-2025-55834](https://cve.now/CVE-2025-55834.md): A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logControll (CVSS 6.1)
- [CVE-2025-56263](https://cve.now/CVE-2025-56263.md): by-night sms V1.0 has an Arbitrary File Upload vulnerability. (CVSS 8.8)
- [CVE-2025-56264](https://cve.now/CVE-2025-56264.md): The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability. (CVSS 7.5)
- [CVE-2025-56276](https://cve.now/CVE-2025-56276.md): code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the registration function. (CVSS 5.4)
- [CVE-2025-56280](https://cve.now/CVE-2025-56280.md): code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the area where users submit reservation informa (CVSS 5.4)
- [CVE-2025-56289](https://cve.now/CVE-2025-56289.md): code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak admin's cookie informa (CVSS 5.4)
- [CVE-2025-56293](https://cve.now/CVE-2025-56293.md): code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting (XSS) in the Add Child Information section in the C (CVSS 5.4)
- [CVE-2025-56295](https://cve.now/CVE-2025-56295.md): code-projects Computer Laboratory System 1.0 has a file upload vulnerability. (CVSS 7.3)
- [CVE-2025-56557](https://cve.now/CVE-2025-56557.md): An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol. (CVSS 9.1)
- [CVE-2025-56562](https://cve.now/CVE-2025-56562.md): An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only requiring the MAC a (CVSS 7.5)
- [CVE-2025-56697](https://cve.now/CVE-2025-56697.md): A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Co (CVSS 6.1)
- [CVE-2025-56706](https://cve.now/CVE-2025-56706.md): Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter in the openwrt\_getCo (CVSS 8.0)
- [CVE-2025-57119](https://cve.now/CVE-2025-57119.md): An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login (CVSS 9.8)
- [CVE-2025-57145](https://cve.now/CVE-2025-57145.md): A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. (CVSS 5.4)
- [CVE-2025-57624](https://cve.now/CVE-2025-57624.md): A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple (CVSS 7.8)
- [CVE-2025-57625](https://cve.now/CVE-2025-57625.md): CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. (CVSS 8.8)
- [CVE-2025-57631](https://cve.now/CVE-2025-57631.md): SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module (CVSS 9.8)
- [CVE-2025-59436](https://cve.now/CVE-2025-59436.md): The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as (CVSS 3.2, fedorindutny ip)
- [CVE-2025-59437](https://cve.now/CVE-2025-59437.md): The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally ro (CVSS 3.2, fedorindutny ip)
- [CVE-2025-59453](https://cve.now/CVE-2025-59453.md): Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency access. (CVSS 3.2, clickstudios Passwordstate)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.