CVEs published September 19, 2025
120 CVEs were published on September 19, 2025: 13 critical, 47 high. 2 are now in CISA KEV.
- Published
- 120
- Critical
- 13
- High
- 47
- Medium
- 49
- Low
- 2
- Unrated
- 9
- Now in CISA KEV
- 2
- Fix available
- 57
Most affected products
- Linux
- 30
- Vasion Print Virtual Appliance Host · Vasion Print Applicat…
- 17
- Hallo Welt! BlueSpice
- 4
- NetApp StorageGRID
- 4
- zephyrproject-rtos Zephyr
- 4
- 07FLYCMS · 07FLY-CMS +1
- 3
- Liferay Portal · Liferay DXP +1
- 3
- Four-Faith Water Conservancy Informatization Platform
- 2
- Keras-team Keras · keras
- 2
- snipeitapp Snipe-IT · snipe/snipe-it
- 2
Critical 13
- CVE-2022-4980General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin PageGeneral Bytes Crypto Application Server
- CVE-2024-13990MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of UpdatesMicroWorld Technologies eScan AV
- CVE-2025-34205Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCEVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34206Vasion Print (formerly PrinterLogic) Insecure Shared Storage PermissionsVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34199Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle AttacksVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34198Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance ImageVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34192Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL VersionVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34203Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party ComponentsVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-39841scsi: lpfc: Fix buffer free/clear order in deferred receive pathLinux
- CVE-2025-5948Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_businessaonetheme Service Finder Bookings
- CVE-2025-10690Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin InstallationBearsthemes Goza - Nonprofit Charity WordPress Theme
- CVE-2025-48703CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in tcentos-webpanel CentOS Web Panel
- CVE-2025-57644Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature.
High 47
- CVE-2025-59431MapServer - WFS XML Filter Query SQL injectionMapServer
- CVE-2025-9079Admin RCE via prepackaged plugins by way of misconfigured imports directoryMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-34191Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink FollowVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34190Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD_PRELOAD HookingVasion Print Application · Vasion Print Virtual Appliance H…
- CVE-2025-34202Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WANVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34193Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated RuntimesVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34201Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker InstancesVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34188Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext SessionsVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34194Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File HandlingVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34200Vasion Print (formerly PrinterLogic) Network Account Password Stored in CleartextVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34204Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker InstancesVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34197Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudoVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34195Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exeVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-26515CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp StorageGRID
- CVE-2025-39866fs: writeback: fix use-after-free in __mark_inode_dirty()Linux
- CVE-2025-39864wifi: cfg80211: fix use-after-free in cmp_bss()Linux
- CVE-2025-39863wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info workLinux
- CVE-2025-39862wifi: mt76: mt7915: fix list corruption after hardware restartLinux
- CVE-2025-39861Bluetooth: vhci: Prevent use-after-free by removing debugfs files earlyLinux
- CVE-2025-39860Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()Linux
- CVE-2025-39859ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdogLinux
- CVE-2025-39857net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()Linux
- CVE-2025-39855ice: fix NULL access of tx->in_use in ice_ptp_ts_irqLinux
- CVE-2025-39854ice: fix NULL access of tx->in_use in ice_ll_ts_intrLinux
- CVE-2025-39851vxlan: Fix NPD when refreshing an FDB entry with a nexthop objectLinux
- CVE-2025-39849wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()Linux
- CVE-2025-39848ax25: properly unshare skbs in ax25_kiss_rcv()Linux
- CVE-2025-39840audit: fix out-of-bounds read in audit_compare_dname_path()Linux
- CVE-2025-39839batman-adv: fix OOB read/write in network-coding decodeLinux
- CVE-2025-39837platform/x86: asus-wmi: Fix racy registrationsLinux
- CVE-2025-59344AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extractionaliasvault
- CVE-2025-7665Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalationcyberlord92 Miniorange OTP Verification with Firebase
- CVE-2025-9969Reflected XSS in Vizly Web Design's Real Estate PackagesVizly Web Design Real Estate Packages
- CVE-2025-10468Path Traversal in Beyaz Computer's CityPLusBeyaz Computer CityPlus
- CVE-2025-10647Embed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Uploadsalzano Embed PDF for WPForms
- CVE-2025-9905Arbitary Code execution in Keras load_model()Keras-team Keras · keras
- CVE-2025-9906Arbitrary Code execution in Keras Safe ModeKeras-team Keras · keras
- CVE-2025-10456Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requestszephyrproject-rtos Zephyr
- CVE-2025-10458Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS valueszephyrproject-rtos Zephyr
- CVE-2025-7403Bluetooth: bt_conn_tx_processor unsafe handlingzephyrproject-rtos Zephyr
- CVE-2025-5955Service Finder SMS System <= 2.0.0 - Authentication Bypassaonetheme Service Finder SMS System
- CVE-2025-7937Supermicro BMC firmware update validation bypassSMCI MBD-X12STW
- CVE-2025-6198Supermicro BMC firmware update validation bypassSMCI X13SEM-F
- CVE-2025-52159Hardcoded credentials in default configuration of PPress 0.0.9.
- CVE-2025-54761An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.
- CVE-2025-54815Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.
- CVE-2025-57528An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the funcname,
Medium, low and unrated 60
- CVE-2025-43808The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10,Liferay Portal · Liferay DXP +1
- CVE-2025-10568HyperX NGENUITY - Arbitrary Code ExecutionHP HyperX NGENUITY
- CVE-2025-9081IDOR in board file download allows any user to download any file by UUIDMattermost · github.com/mattermost/mattermost-plugin-boa… +4
- CVE-2025-43809Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and oldLiferay Portal · Liferay DXP +1
- CVE-2025-26517CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp StorageGRID
- CVE-2025-26516CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp StorageGRID
- CVE-2025-43803Insecure direct object reference (IDOR) vulnerability in the Contacts Center widget in Liferay Portal 7.4.0 through 7.4.3.119, and older unsLiferay Portal · Liferay DXP +1
- CVE-2025-34189Vasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session HijackingVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-26514CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp StorageGRID
- CVE-2025-10722SKTLab Mukbee App com.dw.android.mukbee AndroidManifest.xml improper export of android application componentsSKTLab Mukbee App
- CVE-2025-10721Webull Investing & Trading App AndroidManifest.xml improper export of android application componentsWebull Investing & Trading App
- CVE-2025-36248IBM Copy Services Manager cross-site scriptingIBM Copy Services Manager
- CVE-2025-10718Ooma Office Business Phone App com.ooma.office2 improper export of android application componentsOoma Office Business Phone App
- CVE-2025-59427Cloudflare vite plugin exposes secrets over the built-in dev servercloudflare workers-sdk · @cloudflare/vite-plugin
- CVE-2025-39865tee: fix NULL pointer dereference in tee_shm_putLinux
- CVE-2025-39858eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ringLinux
- CVE-2025-39856net: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndevLinux
- CVE-2025-39853i40e: Fix potential invalid access when MAC list is emptyLinux
- CVE-2025-39852net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6Linux
- CVE-2025-39850vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objectsLinux
- CVE-2025-39847ppp: fix memory leak in pad_compress_skbLinux
- CVE-2025-39846pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()Linux
- CVE-2025-39845x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()Linux
- CVE-2025-39844mm: move page table sync declarations to linux/pgtable.hLinux
- CVE-2025-39843mm: slub: avoid wake up kswapd in set_track_prepareLinux
- CVE-2025-39842ocfs2: prevent release journal inode after journal shutdownLinux
- CVE-2025-39838cifs: prevent NULL pointer dereference in UTF16 conversionLinux
- CVE-2025-8664XSS in Saysis Computer Systems' StarCitiesSaysis Computer Systems Trade Ltd. StarCities E-Municipalit…
- CVE-2025-10717intsig CamScanner App com.intsig.camscanner AndroidManifest.xml improper export of android application componentsintsig CamScanner App
- CVE-2025-10716Creality Cloud App com.cxsw.sdprinter AndroidManifest.xml improper export of android application componentsCreality Cloud App
- CVE-2025-8532IDOR in Bimser's eBA Document and Workflow Management SystemBimser Solution Software Trade eBA Document and Workflow Ma…
- CVE-2025-10715APEUni PTE Exam Practice App com.ape_edication AndroidManifest.xml improper export of android application componentsAPEUni PTE Exam Practice App
- CVE-2025-1071207FLYCMS/07FLY-CMS/07FlyCRM login sql injection07FLYCMS · 07FLY-CMS +1
- CVE-2025-58114Potential XSS in Extension:CognitiveProcessDesignerHallo Welt! BlueSpice
- CVE-2025-57880Potential XSS in Extension:BlueSpiceWhoIsOnlineHallo Welt! BlueSpice
- CVE-2025-48007Potential XSS in Extension:BlueSpiceAvatarsHallo Welt! BlueSpice
- CVE-2025-46703Potential XSS in Extension:AtMentionsHallo Welt! BlueSpice
- CVE-2025-1071107FLYCMS/07FLY-CMS/07FlyCRM Login cross site scripting07FLYCMS · 07FLY-CMS +1
- CVE-2025-1071007FLYCMS/07FLY-CMS/07FlyCRM index.php cross site scripting07FLYCMS · 07FLY-CMS +1
- CVE-2025-10709Four-Faith Water Conservancy Informatization Platform historyDownload.do;otheruserLogin.do;getfile path traversalFour-Faith Water Conservancy Informatization Platform
- CVE-2025-10708Four-Faith Water Conservancy Informatization Platform historyDownload.do;usrlogout.do path traversalFour-Faith Water Conservancy Informatization Platform
- CVE-2025-10707JeecgBoot sendMsg improper authorizationJeecgBoot
- CVE-2025-10719WisdomGarden｜Tronclass - Insecure Direct Object ReferenceWisdomGarden Tronclass
- CVE-2025-10630Regex DoS in Grafana Zabbix Plugingrafana-zabbix-plugin · github.com/alexanderzobnin/grafana-…
- CVE-2025-8531Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, QMitsubishi Electric MELSEC-Q Series Q03UDVCPU · Mitsubis… +7
- CVE-2025-7702Open Redirect in PUSULA's Manageable Email Sending SystemPusula Communication Information Internet Industry and Trad…
- CVE-2025-10457Bluetooth: Out-Of-Context le_conn_rsp Handlingzephyrproject-rtos Zephyr
- CVE-2025-10146Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parametercodename065 Download Manager
- CVE-2025-8487Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installationextendthemes Kubio AI Page Builder
- CVE-2025-55910CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.
- CVE-2025-56762Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.
- CVE-2025-56869Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system
- CVE-2025-57296Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to th
- CVE-2025-57396Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation.
- CVE-2025-59689Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment.Libraesva Email Security Gateway
- CVE-2025-59712Snipe-IT before 8.1.18 allows XSS.snipeitapp Snipe-IT · snipe/snipe-it
- CVE-2025-59713Snipe-IT before 8.1.18 allows unsafe deserialization.snipeitapp Snipe-IT · snipe/snipe-it
- CVE-2025-59714In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.Internet2 Grouper
- CVE-2025-59715SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.SMSEagle
- CVE-2025-59717In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring ma@digitalocean/do-markdownit