CVEs published September 18, 2025
199 CVEs were published on September 18, 2025: 11 critical, 64 high. 1 is now in CISA KEV.
- Published
- 199
- Critical
- 11
- High
- 64
- Medium
- 117
- Low
- 5
- Unrated
- 2
- Now in CISA KEV
- 1
- Fix available
- 39
Most affected products
- Linux
- 121
- Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- 9
- Dover Fueling Solutions ProGauge MagLink LX
- 3
- fuyang_lipengjun platform
- 3
- IBM watsonx.data
- 3
- Microsoft Windows
- 3
- ABB FLXEON
- 2
- D-Link DIR-852
- 2
- itsourcecode Online Discussion Forum
- 2
- itsourcecode Online Petshop Management System
- 2
Critical 11
- CVE-2025-10035Deserialization Vulnerability in GoAnywhere MFT's License ServletFortra GoAnywhere MFT
- CVE-2025-30519Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak CredentialsDover Fueling Solutions ProGauge MagLink LX
- CVE-2025-54807Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic KeyDover Fueling Solutions ProGauge MagLink LX
- CVE-2022-50410NFSD: Protect against send buffer overflow in NFSv2 READLinux
- CVE-2022-50401nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failureLinux
- CVE-2023-53382net/smc: Reset connection when trying to use SMCRv2 fails.Linux
- CVE-2024-13151SQLi in ESBI Informatics's Auto Service SoftwareESBI Information and Telecommunication Industry and Trade L…
- CVE-2025-6237Path Traversal and Arbitrary File Deletion in invoke-ai/invokeaiinvoke-ai/invokeai · invokeai
- CVE-2025-9083Ninja-forms < 3.11.1 - Unauthenticated PHP ObjectionNinja Forms
- CVE-2025-8942WP Hotel Booking < 2.2.3 - Subscriber+ Rating ManipulationWP Hotel Booking
- CVE-2025-5305Password Reset with Code < 0.0.17 - Insecure Password Reset Code CreationPassword Reset with Code for WordPress REST API
High 64
- CVE-2025-53969Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side SecurityCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-59220Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-59216Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-54810Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replayCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-59215Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-54818Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive InformationCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-54497Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical ResourceCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-52873Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical ResourceCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-54860Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication AttemptsCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-53947Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default PermissionsCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-47698An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials.Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-54754Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded PasswordCognex In-Sight 2000 series · Cognex In-Sight 7000 series +3
- CVE-2025-55068Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or WraparoundDover Fueling Solutions ProGauge MagLink LX
- CVE-2025-59424LinkAce Vulnerable to Stored XSS on the Audit PageKovah LinkAce
- CVE-2023-53446PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-freeLinux
- CVE-2023-53445net: qrtr: Fix a refcount bug in qrtr_recvmsg()Linux
- CVE-2023-53440nilfs2: fix sysfs interface lifetimeLinux
- CVE-2023-53432firewire: net: fix use after free in fwnet_finish_incoming_packet()Linux
- CVE-2023-53431scsi: ses: Handle enclosure with just a primary component gracefullyLinux
- CVE-2023-53429btrfs: don't check PageError in __extent_writepageLinux
- CVE-2023-53427cifs: Fix warning and UAF when destroy the MR listLinux
- CVE-2023-53426xsk: Fix xsk_diag use-after-free error during socket cleanupLinux
- CVE-2023-53420ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()Linux
- CVE-2022-50419Bluetooth: hci_sysfs: Fix attempting to call device_add multiple timesLinux
- CVE-2022-50417drm/panfrost: Fix GEM handle creation ref-countingLinux
- CVE-2022-50413wifi: mac80211: fix use-after-freeLinux
- CVE-2022-50412drm: bridge: adv7511: unregister cec i2c device after cec adapterLinux
- CVE-2022-50411ACPICA: Fix error code path in acpi_ds_call_control_method()Linux
- CVE-2022-50408wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()Linux
- CVE-2022-50406iomap: iomap: fix memory corruption when recording errors during writebackLinux
- CVE-2022-50405net/tunnel: wait until all sk_user_data reader finish before releasing the sockLinux
- CVE-2025-10672whuan132 AIBattery com.collweb.AIBatteryHelper BatteryXPCService.swift missing authenticationwhuan132 AIBattery
- CVE-2023-53399ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()Linux
- CVE-2023-53398mlx5: fix possible ptp queue fifo use-after-freeLinux
- CVE-2023-53395ACPICA: Add AML_NO_OPERAND_RESOLVE flag to TimerLinux
- CVE-2023-53394net/mlx5e: xsk: Fix crash on regular rq reactivationLinux
- CVE-2023-53388drm/mediatek: Clean dangling pointer on bind error pathLinux
- CVE-2023-53387scsi: ufs: core: Fix device management cmd timeout flowLinux
- CVE-2023-53386Bluetooth: Fix potential use-after-free when clear keysLinux
- CVE-2023-53381NFSD: fix leaked reference count of nfsd4_ssc_umount_itemLinux
- CVE-2023-53378drm/i915/dpt: Treat the DPT BO as a framebufferLinux
- CVE-2023-53377cifs: prevent use-after-free by freeing the cfile laterLinux
- CVE-2023-53376scsi: mpi3mr: Use number of bits to manage bitmap sizesLinux
- CVE-2023-53374Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone earlyLinux
- CVE-2023-53373crypto: seqiv - Handle EBUSY correctlyLinux
- CVE-2023-53372sctp: fix a potential overflow in sctp_ifwdtsn_skipLinux
- CVE-2022-50399media: atomisp: prevent integer overflow in sh_css_set_black_frame()Linux
- CVE-2022-50394i2c: ismt: Fix an out-of-bounds bug in ismt_access()Linux
- CVE-2022-50393drm/amdgpu: SDMA update use unlocked iteratorLinux
- CVE-2022-50386Bluetooth: L2CAP: Fix user-after-freeLinux
- CVE-2022-50384staging: vme_user: Fix possible UAF in tsi148_dma_list_addLinux
- CVE-2022-50378drm/meson: reorder driver deinit sequence to fix use-after-free bugLinux
- CVE-2025-10666D-Link DIR-825 apply.cgi sub_4106d4 buffer overflowD-Link DIR-825
- CVE-2025-40677SQL injection vulnerability in Summar Software´s Portal del EmpleadoSummar Software Portal del Empleado
- CVE-2025-10207Authenticated File Disclosure/DeleteABB FLXEON
- CVE-2024-48851Remote Code ExecutionABB FLXEON
- CVE-2025-8565Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installationwplegalpages Privacy Policy Generator – WPLP Legal Pages
- CVE-2023-49565Remote Code ExecutionNokia CBIS,NCS
- CVE-2023-49564Authentication BypassNokia CBIS,NCS
- CVE-2023-49367An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent pa
- CVE-2025-50255Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request.
- CVE-2025-55912An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php t
- CVE-2025-57293A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function i
- CVE-2025-57295H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials.
Medium, low and unrated 124
- CVE-2025-30755OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page.Oracle OpenGrok
- CVE-2025-10689D-Link DIR-645 soap.cgi soapcgi_main command injectionD-Link DIR-645
- CVE-2025-10688SourceCodester Pet Grooming Management Software paid.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10650Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative UsersSoftIron HyperCloud
- CVE-2025-26503Buffer manipulationWind River Systems VxWorks
- CVE-2025-47906Unexpected paths returned from LookPath in os/execGo standard library os/exec · stdlib
- CVE-2025-10687SourceCodester Responsive E-Learning System add_teacher.php sql injectionSourceCodester Responsive E-Learning System
- CVE-2023-53447f2fs: don't reset unchangable mount option in f2fs_remount()Linux
- CVE-2023-53444drm/ttm: fix bulk_move corruption when adding a entryLinux
- CVE-2023-53443mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leakLinux
- CVE-2023-53442ice: Block switchdev mode when ADQ is active and vice versaLinux
- CVE-2023-53441bpf: cpumap: Fix memory leak in cpu_map_update_elemLinux
- CVE-2023-53439net: skb_partial_csum_set() fix against transport header magic valueLinux
- CVE-2023-53438x86/MCE: Always save CS register on AMD Zen IF Poison errorsLinux
- CVE-2023-53437media: uvcvideo: Handle cameras with invalid descriptorsLinux
- CVE-2023-53436scsi: snic: Fix possible memory leak if device_add() failsLinux
- CVE-2023-53435cassini: Fix a memory leak in the error handling path of cas_init_one()Linux
- CVE-2023-53434remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP CoresLinux
- CVE-2023-53433net: add vlan_get_protocol_and_depth() helperLinux
- CVE-2023-53430wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanupLinux
- CVE-2023-53428powercap: arm_scmi: Remove recursion while parsing zonesLinux
- CVE-2023-53425media: platform: mediatek: vpu: fix NULL ptr dereferenceLinux
- CVE-2023-53424clk: mediatek: fix of_iomap memory leakLinux
- CVE-2023-53423objtool: Fix memory leak in create_static_call_sections()Linux
- CVE-2023-53422wifi: iwlwifi: fw: fix memory leak in debugfsLinux
- CVE-2023-53421blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()Linux
- CVE-2023-53419rcu: Protect rcu_print_task_exp_stall() ->exp_tasks accessLinux
- CVE-2022-50418wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()Linux
- CVE-2022-50416irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init()Linux
- CVE-2022-50415parisc: led: Fix potential null-ptr-deref in start_task()Linux
- CVE-2022-50414scsi: fcoe: Fix transport not deattached when fcoe_if_init() failsLinux
- CVE-2022-50409net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memoryLinux
- CVE-2022-50407crypto: hisilicon/qm - increase the memory of local variablesLinux
- CVE-2022-50404fbdev: fbcon: release buffer when fbcon_do_set_font() failedLinux
- CVE-2022-50402drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()Linux
- CVE-2025-10676fuyang_lipengjun platform queryAll BrandController improper authorizationfuyang_lipengjun platform
- CVE-2025-10675fuyang_lipengjun platform queryAll AttributeController improper authorizationfuyang_lipengjun platform
- CVE-2025-10674fuyang_lipengjun platform queryAll AttributeCategoryController improper authorizationfuyang_lipengjun platform
- CVE-2025-36146IBM watsonx.data information disclosureIBM watsonx.data
- CVE-2025-36143IBM watsonx.data command executionIBM watsonx.data
- CVE-2025-36139IBM watsonx.data cross-site scriptingIBM watsonx.data
- CVE-2025-10673itsourcecode Student Information Management System index.php sql injectionitsourcecode Student Information Management System
- CVE-2025-59421Press vulnerable to email flooding to users due to lack of validation and rate limitsfrappe press
- CVE-2025-59417Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messageslobehub lobe-chat · @lobehub/chat
- CVE-2025-10671youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random valuesyouth-is-as-pale-as-poetry e-learning
- CVE-2025-59040Tuleap backlog item representations do not verify the permissions of the child trackersEnalean tuleap
- CVE-2025-10670itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injectionitsourcecode E-Logbook with Health Monitoring System for CO…
- CVE-2023-53418USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53417USB: sl811: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53416USB: isp1362: fix memory leak with using debugfs_lookup()Linux
- CVE-2025-4444Tor Onion Service Descriptor resource consumptionTor
- CVE-2023-53415USB: dwc3: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53414scsi: snic: Fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53413USB: isp116x: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53412USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53411PM: EM: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53410USB: ULPI: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53409drivers: base: component: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53408trace/blktrace: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53407USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53406USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53405USB: gadget: gr_udc: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53404USB: fotg210: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53403time/debug: Fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53402kernel/printk/index.c: fix memory leak with using debugfs_lookup()Linux
- CVE-2022-50400staging: greybus: audio_helper: remove unused and wrong debugfs usageLinux
- CVE-2023-53401mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()Linux
- CVE-2023-53400ALSA: hda: Fix Oops by 9.1 surround channel namesLinux
- CVE-2023-53397modpost: fix off by one in is_executable_section()Linux
- CVE-2023-53396ubifs: Fix memory leak in do_renameLinux
- CVE-2023-53393RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for deviceLinux
- CVE-2023-53392HID: intel-ish-hid: Fix kernel panic during warm resetLinux
- CVE-2023-53391shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfsLinux
- CVE-2023-53390drivers: base: dd: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53389drm/mediatek: dp: Only trigger DRM HPD events if bridge is attachedLinux
- CVE-2023-53385media: mdp3: Fix resource leaks in of_find_device_by_nodeLinux
- CVE-2023-53384wifi: mwifiex: avoid possible NULL skb pointer dereferenceLinux
- CVE-2023-53383irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4Linux
- CVE-2023-53380md/raid10: fix null-ptr-deref of mreplace in raid10_sync_requestLinux
- CVE-2023-53379usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()Linux
- CVE-2023-53375tracing: Free error logs of tracing instancesLinux
- CVE-2023-53371net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_createLinux
- CVE-2023-53370drm/amdgpu: fix memory leak in mes self testLinux
- CVE-2023-53369net: dcb: choose correct policy to parse DCB_ATTR_BCNLinux
- CVE-2022-50398drm/msm/dp: add atomic_check to bridge opsLinux
- CVE-2022-50396net: sched: fix memory leak in tcindex_set_parmsLinux
- CVE-2022-50395integrity: Fix memory leakage in keyring allocation error pathLinux
- CVE-2022-50392ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe()Linux
- CVE-2022-50391mm/mempolicy: fix memory leak in set_mempolicy_home_node system callLinux
- CVE-2022-50390drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATEDLinux
- CVE-2022-50389tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leakLinux
- CVE-2022-50388nvme: fix multipath crash caused by flush request when blktrace is enabledLinux
- CVE-2022-50387net: hinic: fix the issue of CMDQ memory leaksLinux
- CVE-2022-50385NFS: Fix an Oops in nfs_d_automount()Linux
- CVE-2022-50383media: mediatek: vcodec: Can't set dst buffer to done when lat decode errorLinux
- CVE-2022-50382padata: Always leave BHs disabled when running ->parallel()Linux
- CVE-2022-50381md: fix a crash in mempool_freeLinux
- CVE-2022-50380mm: /proc/pid/smaps_rollup: fix no vma's null-derefLinux
- CVE-2022-50379btrfs: fix race between quota enable and quota rescan ioctlLinux
- CVE-2022-50376orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()Linux
- CVE-2022-50375tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdownLinux
- CVE-2025-10669Airsonic-Advanced Playlist Upload unrestricted uploadAirsonic-Advanced
- CVE-2025-10668itsourcecode Online Discussion Forum compose_msg_admin.php sql injectionitsourcecode Online Discussion Forum
- CVE-2025-10667itsourcecode Online Discussion Forum compose_msg.php sql injectionitsourcecode Online Discussion Forum
- CVE-2025-10665kidaze CourseSelectionSystem COUNT3s3.php sql injectionkidaze CourseSelectionSystem
- CVE-2025-10664PHPGurukul Small CRM create-ticket.php sql injectionPHPGurukul Small CRM
- CVE-2025-40678Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del EmpleadoSummar Software Portal del Empleado
- CVE-2024-25011Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information VulnerabilityEricsson Catalog Manager · Ericsson Order Care
- CVE-2025-10663PHPGurukul Online Course Registration my-profile.php sql injectionPHPGurukul Online Course Registration
- CVE-2025-10662SeaCMS admin_members.php sql injectionSeaCMS
- CVE-2025-9992Ghost Kit <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingnko Ghost Kit – Page Builder Blocks, Motion Effects & Exten…
- CVE-2025-30187Denial of service via crafted DoH exchange in PowerDNS DNSdistPowerDNS DNSdist
- CVE-2025-0547XSS in Mikrogrup's BizmuParaşüt Software Bizmu
- CVE-2025-10493Chained Quiz <= 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookieprasunsen Chained Quiz
- CVE-2025-10642wangchenyi1996 chat_forum q.php cross site scriptingwangchenyi1996 chat_forum
- CVE-2025-10634D-Link DIR-823X Environment Variable goahead sub_412E7C command injectionD-Link DIR-823X
- CVE-2025-10632itsourcecode Online Petshop Management System Admin Dashboard availableframe.php cross site scriptingitsourcecode Online Petshop Management System
- CVE-2025-10631itsourcecode Online Petshop Management System Available Products addcnp.php cross site scriptingitsourcecode Online Petshop Management System
- CVE-2025-10629D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi_main command injectionD-Link DIR-852
- CVE-2025-10628D-Link DIR-852 Web Management hedwig.cgi command injectionD-Link DIR-852
- CVE-2025-55911An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
- CVE-2025-57452In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attacker
- CVE-2025-59691PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as WiPureVPN
- CVE-2025-59692PureVPN client applications on Linux through September 2025 mishandle firewalling.PureVPN