# CVEs published 2025-09-18

199 CVEs were published on September 18, 2025: 11 critical, 64 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-30755](https://cve.now/CVE-2025-30755.md): OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. (CVSS 6.1, Oracle OpenGrok)
- [CVE-2025-10035](https://cve.now/CVE-2025-10035.md): Deserialization Vulnerability in GoAnywhere MFT's License Servlet (CVSS 10.0, KEV, Fortra GoAnywhere MFT)
- [CVE-2025-53969](https://cve.now/CVE-2025-53969.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security (CVSS 8.8, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-59220](https://cve.now/CVE-2025-59220.md): Windows Bluetooth Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-59216](https://cve.now/CVE-2025-59216.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-54810](https://cve.now/CVE-2025-54810.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay (CVSS 8.0, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-59215](https://cve.now/CVE-2025-59215.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-54818](https://cve.now/CVE-2025-54818.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information (CVSS 8.0, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-54497](https://cve.now/CVE-2025-54497.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource (CVSS 8.1, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-52873](https://cve.now/CVE-2025-52873.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource (CVSS 8.1, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-54860](https://cve.now/CVE-2025-54860.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts (CVSS 7.7, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-53947](https://cve.now/CVE-2025-53947.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions (CVSS 7.7, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-47698](https://cve.now/CVE-2025-47698.md): An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials. (CVSS 8.6, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-54754](https://cve.now/CVE-2025-54754.md): Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password (CVSS 8.0, Cognex In-Sight 2000 series · Cognex In-Sight 7000 series +3)
- [CVE-2025-30519](https://cve.now/CVE-2025-30519.md): Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials (CVSS 9.8, Dover Fueling Solutions ProGauge MagLink LX)
- [CVE-2025-54807](https://cve.now/CVE-2025-54807.md): Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key (CVSS 9.8, Dover Fueling Solutions ProGauge MagLink LX)
- [CVE-2025-55068](https://cve.now/CVE-2025-55068.md): Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound (CVSS 8.2, Dover Fueling Solutions ProGauge MagLink LX)
- [CVE-2025-10689](https://cve.now/CVE-2025-10689.md): D-Link DIR-645 soap.cgi soapcgi\_main command injection (CVSS 5.3, D-Link DIR-645)
- [CVE-2025-59424](https://cve.now/CVE-2025-59424.md): LinkAce Vulnerable to Stored XSS on the Audit Page (CVSS 7.3, Kovah LinkAce)
- [CVE-2025-10688](https://cve.now/CVE-2025-10688.md): SourceCodester Pet Grooming Management Software paid.php sql injection (CVSS 6.9, SourceCodester Pet Grooming Management Software)
- [CVE-2025-10650](https://cve.now/CVE-2025-10650.md): Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users (CVSS 1.8, SoftIron HyperCloud)
- [CVE-2025-26503](https://cve.now/CVE-2025-26503.md): Buffer manipulation (CVSS 6.7, Wind River Systems VxWorks)
- [CVE-2025-47906](https://cve.now/CVE-2025-47906.md): Unexpected paths returned from LookPath in os/exec (CVSS 6.5, Go standard library os/exec · stdlib)
- [CVE-2025-10687](https://cve.now/CVE-2025-10687.md): SourceCodester Responsive E-Learning System add\_teacher.php sql injection (CVSS 6.9, SourceCodester Responsive E-Learning System)
- [CVE-2023-53447](https://cve.now/CVE-2023-53447.md): f2fs: don't reset unchangable mount option in f2fs\_remount() (CVSS 4.7, Linux)
- [CVE-2023-53446](https://cve.now/CVE-2023-53446.md): PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (CVSS 7.8, Linux)
- [CVE-2023-53445](https://cve.now/CVE-2023-53445.md): net: qrtr: Fix a refcount bug in qrtr\_recvmsg() (CVSS 7.8, Linux)
- [CVE-2023-53444](https://cve.now/CVE-2023-53444.md): drm/ttm: fix bulk\_move corruption when adding a entry (CVSS 5.5, Linux)
- [CVE-2023-53443](https://cve.now/CVE-2023-53443.md): mfd: arizona: Use pm\_runtime\_resume\_and\_get() to prevent refcnt leak (CVSS 5.5, Linux)
- [CVE-2023-53442](https://cve.now/CVE-2023-53442.md): ice: Block switchdev mode when ADQ is active and vice versa (CVSS 5.5, Linux)
- [CVE-2023-53441](https://cve.now/CVE-2023-53441.md): bpf: cpumap: Fix memory leak in cpu\_map\_update\_elem (CVSS 5.5, Linux)
- [CVE-2023-53440](https://cve.now/CVE-2023-53440.md): nilfs2: fix sysfs interface lifetime (CVSS 7.8, Linux)
- [CVE-2023-53439](https://cve.now/CVE-2023-53439.md): net: skb\_partial\_csum\_set() fix against transport header magic value (CVSS 5.5, Linux)
- [CVE-2023-53438](https://cve.now/CVE-2023-53438.md): x86/MCE: Always save CS register on AMD Zen IF Poison errors (CVSS 5.5, Linux)
- [CVE-2023-53437](https://cve.now/CVE-2023-53437.md): media: uvcvideo: Handle cameras with invalid descriptors (CVSS 5.5, Linux)
- [CVE-2023-53436](https://cve.now/CVE-2023-53436.md): scsi: snic: Fix possible memory leak if device\_add() fails (CVSS 5.5, Linux)
- [CVE-2023-53435](https://cve.now/CVE-2023-53435.md): cassini: Fix a memory leak in the error handling path of cas\_init\_one() (CVSS 5.5, Linux)
- [CVE-2023-53434](https://cve.now/CVE-2023-53434.md): remoteproc: imx\_dsp\_rproc: Add custom memory copy implementation for i.MX DSP Cores (CVSS 5.5, Linux)
- [CVE-2023-53433](https://cve.now/CVE-2023-53433.md): net: add vlan\_get\_protocol\_and\_depth() helper (CVSS 5.5, Linux)
- [CVE-2023-53432](https://cve.now/CVE-2023-53432.md): firewire: net: fix use after free in fwnet\_finish\_incoming\_packet() (CVSS 8.8, Linux)
- [CVE-2023-53431](https://cve.now/CVE-2023-53431.md): scsi: ses: Handle enclosure with just a primary component gracefully (CVSS 8.8, Linux)
- [CVE-2023-53430](https://cve.now/CVE-2023-53430.md): wifi: mt76: dma: fix memory leak running mt76\_dma\_tx\_cleanup (CVSS 5.5, Linux)
- [CVE-2023-53429](https://cve.now/CVE-2023-53429.md): btrfs: don't check PageError in \_\_extent\_writepage (CVSS 7.8, Linux)
- [CVE-2023-53428](https://cve.now/CVE-2023-53428.md): powercap: arm\_scmi: Remove recursion while parsing zones (CVSS 5.5, Linux)
- [CVE-2023-53427](https://cve.now/CVE-2023-53427.md): cifs: Fix warning and UAF when destroy the MR list (CVSS 7.8, Linux)
- [CVE-2023-53426](https://cve.now/CVE-2023-53426.md): xsk: Fix xsk\_diag use-after-free error during socket cleanup (CVSS 7.8, Linux)
- [CVE-2023-53425](https://cve.now/CVE-2023-53425.md): media: platform: mediatek: vpu: fix NULL ptr dereference (CVSS 5.5, Linux)
- [CVE-2023-53424](https://cve.now/CVE-2023-53424.md): clk: mediatek: fix of\_iomap memory leak (CVSS 5.5, Linux)
- [CVE-2023-53423](https://cve.now/CVE-2023-53423.md): objtool: Fix memory leak in create\_static\_call\_sections() (CVSS 5.5, Linux)
- [CVE-2023-53422](https://cve.now/CVE-2023-53422.md): wifi: iwlwifi: fw: fix memory leak in debugfs (CVSS 5.5, Linux)
- [CVE-2023-53421](https://cve.now/CVE-2023-53421.md): blk-cgroup: Reinit blkg\_iostat\_set after clearing in blkcg\_reset\_stats() (CVSS 5.5, Linux)
- [CVE-2023-53420](https://cve.now/CVE-2023-53420.md): ntfs: Fix panic about slab-out-of-bounds caused by ntfs\_listxattr() (CVSS 7.1, Linux)
- [CVE-2023-53419](https://cve.now/CVE-2023-53419.md): rcu: Protect rcu\_print\_task\_exp\_stall() -\>exp\_tasks access (CVSS 5.5, Linux)
- [CVE-2022-50419](https://cve.now/CVE-2022-50419.md): Bluetooth: hci\_sysfs: Fix attempting to call device\_add multiple times (CVSS 8.8, Linux)
- [CVE-2022-50418](https://cve.now/CVE-2022-50418.md): wifi: ath11k: mhi: fix potential memory leak in ath11k\_mhi\_register() (CVSS 5.5, Linux)
- [CVE-2022-50417](https://cve.now/CVE-2022-50417.md): drm/panfrost: Fix GEM handle creation ref-counting (CVSS 7.8, Linux)
- [CVE-2022-50416](https://cve.now/CVE-2022-50416.md): irqchip/wpcm450: Fix memory leak in wpcm450\_aic\_of\_init() (CVSS 5.5, Linux)
- [CVE-2022-50415](https://cve.now/CVE-2022-50415.md): parisc: led: Fix potential null-ptr-deref in start\_task() (CVSS 5.5, Linux)
- [CVE-2022-50414](https://cve.now/CVE-2022-50414.md): scsi: fcoe: Fix transport not deattached when fcoe\_if\_init() fails (CVSS 5.5, Linux)
- [CVE-2022-50413](https://cve.now/CVE-2022-50413.md): wifi: mac80211: fix use-after-free (CVSS 8.8, Linux)
- [CVE-2022-50412](https://cve.now/CVE-2022-50412.md): drm: bridge: adv7511: unregister cec i2c device after cec adapter (CVSS 7.8, Linux)
- [CVE-2022-50411](https://cve.now/CVE-2022-50411.md): ACPICA: Fix error code path in acpi\_ds\_call\_control\_method() (CVSS 7.8, Linux)
- [CVE-2022-50410](https://cve.now/CVE-2022-50410.md): NFSD: Protect against send buffer overflow in NFSv2 READ (CVSS 9.8, Linux)
- [CVE-2022-50409](https://cve.now/CVE-2022-50409.md): net: If sock is dead don't access sock's sk\_wq in sk\_stream\_wait\_memory (no CVSS, Linux)
- [CVE-2022-50408](https://cve.now/CVE-2022-50408.md): wifi: brcmfmac: fix use-after-free bug in brcmf\_netdev\_start\_xmit() (CVSS 7.8, Linux)
- [CVE-2022-50407](https://cve.now/CVE-2022-50407.md): crypto: hisilicon/qm - increase the memory of local variables (CVSS 5.5, Linux)
- [CVE-2022-50406](https://cve.now/CVE-2022-50406.md): iomap: iomap: fix memory corruption when recording errors during writeback (CVSS 7.8, Linux)
- [CVE-2022-50405](https://cve.now/CVE-2022-50405.md): net/tunnel: wait until all sk\_user\_data reader finish before releasing the sock (CVSS 7.8, Linux)
- [CVE-2022-50404](https://cve.now/CVE-2022-50404.md): fbdev: fbcon: release buffer when fbcon\_do\_set\_font() failed (CVSS 5.5, Linux)
- [CVE-2022-50402](https://cve.now/CVE-2022-50402.md): drivers/md/md-bitmap: check the return value of md\_bitmap\_get\_counter() (CVSS 5.5, Linux)
- [CVE-2022-50401](https://cve.now/CVE-2022-50401.md): nfsd: under NFSv4.1, fix double svc\_xprt\_put on rpc\_create failure (CVSS 9.8, Linux)
- [CVE-2025-10676](https://cve.now/CVE-2025-10676.md): fuyang\_lipengjun platform queryAll BrandController improper authorization (CVSS 5.3, fuyang\_lipengjun platform)
- [CVE-2025-10675](https://cve.now/CVE-2025-10675.md): fuyang\_lipengjun platform queryAll AttributeController improper authorization (CVSS 5.3, fuyang\_lipengjun platform)
- [CVE-2025-10674](https://cve.now/CVE-2025-10674.md): fuyang\_lipengjun platform queryAll AttributeCategoryController improper authorization (CVSS 5.3, fuyang\_lipengjun platform)
- [CVE-2025-36146](https://cve.now/CVE-2025-36146.md): IBM watsonx.data information disclosure (CVSS 4.3, IBM watsonx.data)
- [CVE-2025-36143](https://cve.now/CVE-2025-36143.md): IBM watsonx.data command execution (CVSS 4.7, IBM watsonx.data)
- [CVE-2025-36139](https://cve.now/CVE-2025-36139.md): IBM watsonx.data cross-site scripting (CVSS 5.5, IBM watsonx.data)
- [CVE-2025-10673](https://cve.now/CVE-2025-10673.md): itsourcecode Student Information Management System index.php sql injection (CVSS 6.9, itsourcecode Student Information Management System)
- [CVE-2025-59421](https://cve.now/CVE-2025-59421.md): Press vulnerable to email flooding to users due to lack of validation and rate limits (CVSS 2.7, frappe press)
- [CVE-2025-59417](https://cve.now/CVE-2025-59417.md): Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages (CVSS 6.8, lobehub lobe-chat · @lobehub/chat)
- [CVE-2025-10672](https://cve.now/CVE-2025-10672.md): whuan132 AIBattery com.collweb.AIBatteryHelper BatteryXPCService.swift missing authentication (CVSS 8.5, whuan132 AIBattery)
- [CVE-2025-10671](https://cve.now/CVE-2025-10671.md): youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values (CVSS 6.3, youth-is-as-pale-as-poetry e-learning)
- [CVE-2025-59040](https://cve.now/CVE-2025-59040.md): Tuleap backlog item representations do not verify the permissions of the child trackers (CVSS 4.3, Enalean tuleap)
- [CVE-2025-10670](https://cve.now/CVE-2025-10670.md): itsourcecode E-Logbook with Health Monitoring System for COVID-19 check\_profile.php sql injection (CVSS 6.9, itsourcecode E-Logbook with Health Monitoring System for CO…)
- [CVE-2023-53418](https://cve.now/CVE-2023-53418.md): USB: gadget: lpc32xx\_udc: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53417](https://cve.now/CVE-2023-53417.md): USB: sl811: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53416](https://cve.now/CVE-2023-53416.md): USB: isp1362: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2025-4444](https://cve.now/CVE-2025-4444.md): Tor Onion Service Descriptor resource consumption (CVSS 6.3, Tor)
- [CVE-2023-53415](https://cve.now/CVE-2023-53415.md): USB: dwc3: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53414](https://cve.now/CVE-2023-53414.md): scsi: snic: Fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53413](https://cve.now/CVE-2023-53413.md): USB: isp116x: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53412](https://cve.now/CVE-2023-53412.md): USB: gadget: bcm63xx\_udc: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53411](https://cve.now/CVE-2023-53411.md): PM: EM: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53410](https://cve.now/CVE-2023-53410.md): USB: ULPI: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53409](https://cve.now/CVE-2023-53409.md): drivers: base: component: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53408](https://cve.now/CVE-2023-53408.md): trace/blktrace: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53407](https://cve.now/CVE-2023-53407.md): USB: gadget: pxa27x\_udc: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53406](https://cve.now/CVE-2023-53406.md): USB: gadget: pxa25x\_udc: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53405](https://cve.now/CVE-2023-53405.md): USB: gadget: gr\_udc: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53404](https://cve.now/CVE-2023-53404.md): USB: fotg210: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53403](https://cve.now/CVE-2023-53403.md): time/debug: Fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53402](https://cve.now/CVE-2023-53402.md): kernel/printk/index.c: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2022-50400](https://cve.now/CVE-2022-50400.md): staging: greybus: audio\_helper: remove unused and wrong debugfs usage (CVSS 5.5, Linux)
- [CVE-2023-53401](https://cve.now/CVE-2023-53401.md): mm: kmem: fix a NULL pointer dereference in obj\_stock\_flush\_required() (CVSS 4.7, Linux)
- [CVE-2023-53400](https://cve.now/CVE-2023-53400.md): ALSA: hda: Fix Oops by 9.1 surround channel names (CVSS 5.5, Linux)
- [CVE-2023-53399](https://cve.now/CVE-2023-53399.md): ksmbd: fix NULL pointer dereference in smb2\_get\_info\_filesystem() (CVSS 7.5, Linux)
- [CVE-2023-53398](https://cve.now/CVE-2023-53398.md): mlx5: fix possible ptp queue fifo use-after-free (CVSS 7.8, Linux)
- [CVE-2023-53397](https://cve.now/CVE-2023-53397.md): modpost: fix off by one in is\_executable\_section() (CVSS 5.5, Linux)
- [CVE-2023-53396](https://cve.now/CVE-2023-53396.md): ubifs: Fix memory leak in do\_rename (CVSS 5.5, Linux)
- [CVE-2023-53395](https://cve.now/CVE-2023-53395.md): ACPICA: Add AML\_NO\_OPERAND\_RESOLVE flag to Timer (CVSS 7.8, Linux)
- [CVE-2023-53394](https://cve.now/CVE-2023-53394.md): net/mlx5e: xsk: Fix crash on regular rq reactivation (CVSS 7.8, Linux)
- [CVE-2023-53393](https://cve.now/CVE-2023-53393.md): RDMA/mlx5: Fix mlx5\_ib\_get\_hw\_stats when used for device (CVSS 5.5, Linux)
- [CVE-2023-53392](https://cve.now/CVE-2023-53392.md): HID: intel-ish-hid: Fix kernel panic during warm reset (no CVSS, Linux)
- [CVE-2023-53391](https://cve.now/CVE-2023-53391.md): shmem: use ramfs\_kill\_sb() for kill\_sb method of ramfs-based tmpfs (CVSS 5.5, Linux)
- [CVE-2023-53390](https://cve.now/CVE-2023-53390.md): drivers: base: dd: fix memory leak with using debugfs\_lookup() (CVSS 5.5, Linux)
- [CVE-2023-53389](https://cve.now/CVE-2023-53389.md): drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached (CVSS 5.5, Linux)
- [CVE-2023-53388](https://cve.now/CVE-2023-53388.md): drm/mediatek: Clean dangling pointer on bind error path (CVSS 7.8, Linux)
- [CVE-2023-53387](https://cve.now/CVE-2023-53387.md): scsi: ufs: core: Fix device management cmd timeout flow (CVSS 7.8, Linux)
- [CVE-2023-53386](https://cve.now/CVE-2023-53386.md): Bluetooth: Fix potential use-after-free when clear keys (CVSS 7.8, Linux)
- [CVE-2023-53385](https://cve.now/CVE-2023-53385.md): media: mdp3: Fix resource leaks in of\_find\_device\_by\_node (CVSS 5.5, Linux)
- [CVE-2023-53384](https://cve.now/CVE-2023-53384.md): wifi: mwifiex: avoid possible NULL skb pointer dereference (CVSS 5.5, Linux)
- [CVE-2023-53383](https://cve.now/CVE-2023-53383.md): irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (CVSS 5.5, Linux)
- [CVE-2023-53382](https://cve.now/CVE-2023-53382.md): net/smc: Reset connection when trying to use SMCRv2 fails. (CVSS 9.8, Linux)
- [CVE-2023-53381](https://cve.now/CVE-2023-53381.md): NFSD: fix leaked reference count of nfsd4\_ssc\_umount\_item (CVSS 7.5, Linux)
- [CVE-2023-53380](https://cve.now/CVE-2023-53380.md): md/raid10: fix null-ptr-deref of mreplace in raid10\_sync\_request (CVSS 5.5, Linux)
- [CVE-2023-53379](https://cve.now/CVE-2023-53379.md): usb: phy: phy-tahvo: fix memory leak in tahvo\_usb\_probe() (CVSS 5.5, Linux)
- [CVE-2023-53378](https://cve.now/CVE-2023-53378.md): drm/i915/dpt: Treat the DPT BO as a framebuffer (CVSS 7.8, Linux)
- [CVE-2023-53377](https://cve.now/CVE-2023-53377.md): cifs: prevent use-after-free by freeing the cfile later (CVSS 7.8, Linux)
- [CVE-2023-53376](https://cve.now/CVE-2023-53376.md): scsi: mpi3mr: Use number of bits to manage bitmap sizes (CVSS 7.8, Linux)
- [CVE-2023-53375](https://cve.now/CVE-2023-53375.md): tracing: Free error logs of tracing instances (CVSS 5.5, Linux)
- [CVE-2023-53374](https://cve.now/CVE-2023-53374.md): Bluetooth: hci\_conn: fail SCO/ISO via hci\_conn\_failed if ACL gone early (CVSS 8.8, Linux)
- [CVE-2023-53373](https://cve.now/CVE-2023-53373.md): crypto: seqiv - Handle EBUSY correctly (CVSS 7.8, Linux)
- [CVE-2023-53372](https://cve.now/CVE-2023-53372.md): sctp: fix a potential overflow in sctp\_ifwdtsn\_skip (CVSS 8.2, Linux)
- [CVE-2023-53371](https://cve.now/CVE-2023-53371.md): net/mlx5e: fix memory leak in mlx5e\_fs\_tt\_redirect\_any\_create (CVSS 5.5, Linux)
- [CVE-2023-53370](https://cve.now/CVE-2023-53370.md): drm/amdgpu: fix memory leak in mes self test (CVSS 5.5, Linux)
- [CVE-2023-53369](https://cve.now/CVE-2023-53369.md): net: dcb: choose correct policy to parse DCB\_ATTR\_BCN (CVSS 5.5, Linux)
- [CVE-2022-50399](https://cve.now/CVE-2022-50399.md): media: atomisp: prevent integer overflow in sh\_css\_set\_black\_frame() (CVSS 7.8, Linux)
- [CVE-2022-50398](https://cve.now/CVE-2022-50398.md): drm/msm/dp: add atomic\_check to bridge ops (CVSS 5.5, Linux)
- [CVE-2022-50396](https://cve.now/CVE-2022-50396.md): net: sched: fix memory leak in tcindex\_set\_parms (CVSS 5.5, Linux)
- [CVE-2022-50395](https://cve.now/CVE-2022-50395.md): integrity: Fix memory leakage in keyring allocation error path (CVSS 5.5, Linux)
- [CVE-2022-50394](https://cve.now/CVE-2022-50394.md): i2c: ismt: Fix an out-of-bounds bug in ismt\_access() (CVSS 7.8, Linux)
- [CVE-2022-50393](https://cve.now/CVE-2022-50393.md): drm/amdgpu: SDMA update use unlocked iterator (CVSS 7.8, Linux)
- [CVE-2022-50392](https://cve.now/CVE-2022-50392.md): ASoC: mediatek: mt8183: fix refcount leak in mt8183\_mt6358\_ts3a227\_max98357\_dev\_probe() (CVSS 5.5, Linux)
- [CVE-2022-50391](https://cve.now/CVE-2022-50391.md): mm/mempolicy: fix memory leak in set\_mempolicy\_home\_node system call (CVSS 5.5, Linux)
- [CVE-2022-50390](https://cve.now/CVE-2022-50390.md): drm/ttm: fix undefined behavior in bit shift for TTM\_TT\_FLAG\_PRIV\_POPULATED (CVSS 5.5, Linux)
- [CVE-2022-50389](https://cve.now/CVE-2022-50389.md): tpm: tpm\_crb: Add the missed acpi\_put\_table() to fix memory leak (CVSS 5.5, Linux)
- [CVE-2022-50388](https://cve.now/CVE-2022-50388.md): nvme: fix multipath crash caused by flush request when blktrace is enabled (CVSS 5.5, Linux)
- [CVE-2022-50387](https://cve.now/CVE-2022-50387.md): net: hinic: fix the issue of CMDQ memory leaks (CVSS 5.5, Linux)
- [CVE-2022-50386](https://cve.now/CVE-2022-50386.md): Bluetooth: L2CAP: Fix user-after-free (CVSS 8.8, Linux)
- [CVE-2022-50385](https://cve.now/CVE-2022-50385.md): NFS: Fix an Oops in nfs\_d\_automount() (CVSS 5.5, Linux)
- [CVE-2022-50384](https://cve.now/CVE-2022-50384.md): staging: vme\_user: Fix possible UAF in tsi148\_dma\_list\_add (CVSS 7.8, Linux)
- [CVE-2022-50383](https://cve.now/CVE-2022-50383.md): media: mediatek: vcodec: Can't set dst buffer to done when lat decode error (CVSS 5.5, Linux)
- [CVE-2022-50382](https://cve.now/CVE-2022-50382.md): padata: Always leave BHs disabled when running -\>parallel() (CVSS 5.5, Linux)
- [CVE-2022-50381](https://cve.now/CVE-2022-50381.md): md: fix a crash in mempool\_free (CVSS 5.5, Linux)
- [CVE-2022-50380](https://cve.now/CVE-2022-50380.md): mm: /proc/pid/smaps\_rollup: fix no vma's null-deref (CVSS 5.5, Linux)
- [CVE-2022-50379](https://cve.now/CVE-2022-50379.md): btrfs: fix race between quota enable and quota rescan ioctl (CVSS 4.7, Linux)
- [CVE-2022-50378](https://cve.now/CVE-2022-50378.md): drm/meson: reorder driver deinit sequence to fix use-after-free bug (CVSS 7.8, Linux)
- [CVE-2022-50376](https://cve.now/CVE-2022-50376.md): orangefs: Fix kmemleak in orangefs\_{kernel,client}\_debug\_init() (CVSS 5.5, Linux)
- [CVE-2022-50375](https://cve.now/CVE-2022-50375.md): tty: serial: fsl\_lpuart: disable dma rx/tx use flags in lpuart\_dma\_shutdown (CVSS 5.5, Linux)
- [CVE-2025-10669](https://cve.now/CVE-2025-10669.md): Airsonic-Advanced Playlist Upload unrestricted upload (CVSS 5.3, Airsonic-Advanced)
- [CVE-2025-10668](https://cve.now/CVE-2025-10668.md): itsourcecode Online Discussion Forum compose\_msg\_admin.php sql injection (CVSS 6.9, itsourcecode Online Discussion Forum)
- [CVE-2025-10667](https://cve.now/CVE-2025-10667.md): itsourcecode Online Discussion Forum compose\_msg.php sql injection (CVSS 6.9, itsourcecode Online Discussion Forum)
- [CVE-2025-10666](https://cve.now/CVE-2025-10666.md): D-Link DIR-825 apply.cgi sub\_4106d4 buffer overflow (CVSS 8.7, D-Link DIR-825)
- [CVE-2025-10665](https://cve.now/CVE-2025-10665.md): kidaze CourseSelectionSystem COUNT3s3.php sql injection (CVSS 5.3, kidaze CourseSelectionSystem)
- [CVE-2025-10664](https://cve.now/CVE-2025-10664.md): PHPGurukul Small CRM create-ticket.php sql injection (CVSS 6.9, PHPGurukul Small CRM)
- [CVE-2024-13151](https://cve.now/CVE-2024-13151.md): SQLi in ESBI Informatics's Auto Service Software (CVSS 9.8, ESBI Information and Telecommunication Industry and Trade L…)
- [CVE-2025-40678](https://cve.now/CVE-2025-40678.md): Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado (CVSS 5.3, Summar Software Portal del Empleado)
- [CVE-2025-40677](https://cve.now/CVE-2025-40677.md): SQL injection vulnerability in Summar Software´s Portal del Empleado (CVSS 8.7, Summar Software Portal del Empleado)
- [CVE-2024-25011](https://cve.now/CVE-2024-25011.md): Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability (CVSS 5.3, Ericsson Catalog Manager · Ericsson Order Care)
- [CVE-2025-10207](https://cve.now/CVE-2025-10207.md): Authenticated File Disclosure/Delete (CVSS 7.5, ABB FLXEON)
- [CVE-2024-48851](https://cve.now/CVE-2024-48851.md): Remote Code Execution (CVSS 7.5, ABB FLXEON)
- [CVE-2025-10663](https://cve.now/CVE-2025-10663.md): PHPGurukul Online Course Registration my-profile.php sql injection (CVSS 6.9, PHPGurukul Online Course Registration)
- [CVE-2025-10662](https://cve.now/CVE-2025-10662.md): SeaCMS admin\_members.php sql injection (CVSS 5.1, SeaCMS)
- [CVE-2025-8565](https://cve.now/CVE-2025-8565.md): Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages \<= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation (CVSS 8.1, wplegalpages Privacy Policy Generator – WPLP Legal Pages)
- [CVE-2025-9992](https://cve.now/CVE-2025-9992.md): Ghost Kit \<= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, nko Ghost Kit – Page Builder Blocks, Motion Effects & Exten…)
- [CVE-2025-30187](https://cve.now/CVE-2025-30187.md): Denial of service via crafted DoH exchange in PowerDNS DNSdist (CVSS 3.7, PowerDNS DNSdist)
- [CVE-2025-0547](https://cve.now/CVE-2025-0547.md): XSS in Mikrogrup's Bizmu (CVSS 4.7, Paraşüt Software Bizmu)
- [CVE-2025-6237](https://cve.now/CVE-2025-6237.md): Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai (CVSS 9.8, invoke-ai/invokeai · invokeai)
- [CVE-2025-10493](https://cve.now/CVE-2025-10493.md): Chained Quiz \<= 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie (CVSS 5.3, prasunsen Chained Quiz)
- [CVE-2023-49565](https://cve.now/CVE-2023-49565.md): Remote Code Execution (CVSS 8.4, Nokia CBIS,NCS)
- [CVE-2023-49564](https://cve.now/CVE-2023-49564.md): Authentication Bypass (CVSS 8.8, Nokia CBIS,NCS)
- [CVE-2025-9083](https://cve.now/CVE-2025-9083.md): Ninja-forms \< 3.11.1 - Unauthenticated PHP Objection (CVSS 9.8, Ninja Forms)
- [CVE-2025-8942](https://cve.now/CVE-2025-8942.md): WP Hotel Booking \< 2.2.3 - Subscriber+ Rating Manipulation (CVSS 9.1, WP Hotel Booking)
- [CVE-2025-5305](https://cve.now/CVE-2025-5305.md): Password Reset with Code \< 0.0.17 - Insecure Password Reset Code Creation (CVSS 9.8, Password Reset with Code for WordPress REST API)
- [CVE-2025-10642](https://cve.now/CVE-2025-10642.md): wangchenyi1996 chat\_forum q.php cross site scripting (CVSS 5.1, wangchenyi1996 chat\_forum)
- [CVE-2025-10634](https://cve.now/CVE-2025-10634.md): D-Link DIR-823X Environment Variable goahead sub\_412E7C command injection (CVSS 5.3, D-Link DIR-823X)
- [CVE-2025-10632](https://cve.now/CVE-2025-10632.md): itsourcecode Online Petshop Management System Admin Dashboard availableframe.php cross site scripting (CVSS 5.1, itsourcecode Online Petshop Management System)
- [CVE-2025-10631](https://cve.now/CVE-2025-10631.md): itsourcecode Online Petshop Management System Available Products addcnp.php cross site scripting (CVSS 5.1, itsourcecode Online Petshop Management System)
- [CVE-2025-10629](https://cve.now/CVE-2025-10629.md): D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi\_main command injection (CVSS 5.3, D-Link DIR-852)
- [CVE-2025-10628](https://cve.now/CVE-2025-10628.md): D-Link DIR-852 Web Management hedwig.cgi command injection (CVSS 5.3, D-Link DIR-852)
- [CVE-2023-49367](https://cve.now/CVE-2023-49367.md): An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent pa (CVSS 8.8)
- [CVE-2025-50255](https://cve.now/CVE-2025-50255.md): Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request. (CVSS 7.8)
- [CVE-2025-55911](https://cve.now/CVE-2025-55911.md): An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file\_downloader.php and the file parameter (CVSS 6.5)
- [CVE-2025-55912](https://cve.now/CVE-2025-55912.md): An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo\_uploader.php t (CVSS 7.3)
- [CVE-2025-57293](https://cve.now/CVE-2025-57293.md): A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi\_pppoe API, processed by the sub\_423930 function i (CVSS 8.8)
- [CVE-2025-57295](https://cve.now/CVE-2025-57295.md): H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. (CVSS 8.0)
- [CVE-2025-57452](https://cve.now/CVE-2025-57452.md): In realme BackupRestore app v15.1.12\_2810c08\_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attacker (CVSS 6.1)
- [CVE-2025-59691](https://cve.now/CVE-2025-59691.md): PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi (CVSS 3.7, PureVPN)
- [CVE-2025-59692](https://cve.now/CVE-2025-59692.md): PureVPN client applications on Linux through September 2025 mishandle firewalling. (CVSS 3.7, PureVPN)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.