CVEs published September 23, 2025
126 CVEs were published on September 23, 2025: 11 critical, 35 high. 1 is now in CISA KEV.
- Published
- 126
- Critical
- 11
- High
- 35
- Medium
- 71
- Low
- 3
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 52
Most affected products
- Linux
- 21
- AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- 7
- SourceCodester Pet Grooming Management Software
- 6
- Novakon P series
- 5
- dnnsoftware Dnn.Platform · DotNetNuke.Core
- 4
- RTI Connext Professional
- 4
- Campcodes Computer Sales and Inventory System
- 3
- Portabilis i-Educar
- 3
- AMD Instinct™ MI300X
- 2
- Campcodes Online Beauty Parlor Management System
- 2
Critical 11
- CVE-2025-59545DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt modulednnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2025-9846Unrestricted File Upload in TaletSys Inka.NetTalentSys Consulting Information Technology Industry Inka.N…
- CVE-2025-9965UDP Service Weak AuthenticationNovakon P series
- CVE-2025-9963Path TraversalNovakon P series
- CVE-2025-9962Unauthenticated Buffer OverflowNovakon P series
- CVE-2025-10412Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'MooMoo Product Options and Price Calculation Formulas for W…
- CVE-2025-10147Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Uploadeteubert Podlove Podcast Publisher
- CVE-2025-9588OS Command Injection in Iron Mountain's enVisionIron Mountain Archiving Services enVision
- CVE-2025-39880libceph: fix invalid accesses to ceph_connection_v1_infoLinux
- CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation VulnerabilitySolarWinds Web Help Desk
- CVE-2025-9321WPCasa <= 1.4.1 - Unauthenticated Code Injectionwpsight WPCasa
High 35
- CVE-2025-57882AutomationDirect CLICK PLUS Improper Resource Shutdown or ReleaseAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2025-55038AutomationDirect CLICK PLUS Missing AuthorizationAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2025-58473AutomationDirect CLICK PLUS Improper Resource Shutdown or ReleaseAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2025-55069AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number GeneratorAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2025-59484AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic AlgorithmAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2025-59826FlagForgeCTF Vulnerable to Unauthorized Problem CreationFlagForgeCTF flagForge
- CVE-2025-59534CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()nasa CryptoLib
- CVE-2025-52905TOTOLINK X6000R Argument Injection VulnerabilityTOTOLINK X6000R
- CVE-2025-4993Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.RTI Connext Professional
- CVE-2025-1255Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.RTI Connext Professional
- CVE-2025-9900Libtiff: libtiff write-what-wherelibtiff · Red Hat Enterprise Linux +3
- CVE-2025-8354RFA File Parsing Type Confusion VulnerabilityAutodesk Revit
- CVE-2025-9844Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI
- CVE-2025-10184OnePlus OxygenOS Telephony provider permission bypassOnePlus OxygenOS
- CVE-2025-9966Execution with Unnecessary PrivilegesNovakon P series
- CVE-2025-9964Weak Authentication for Root UserNovakon P series
- CVE-2025-10244HTML Payload Stored Cross-Site Scripting (XSS) VulnerabilityAutodesk Fusion
- CVE-2025-9798Stored XSS in Netcad Software's NetigmaNetcad Software Netigma
- CVE-2025-39888fuse: Block access to folio overlimitLinux
- CVE-2025-39882drm/mediatek: fix potential OF node use-after-freeLinux
- CVE-2025-39881kernfs: Fix UAF in polling when open file is releasedLinux
- CVE-2025-39873can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKBLinux
- CVE-2025-39872hsr: hold rcu and dev lock for hsr_get_port_ndevLinux
- CVE-2025-39869dmaengine: ti: edma: Fix memory allocation size for queue_priority_mapLinux
- CVE-2025-39868erofs: fix runtime warning on truncate_folio_batch_exceptionals()Linux
- CVE-2025-10838Tenda AC21 WifiExtraSet sub_45BB10 buffer overflowTenda AC21
- CVE-2025-1131Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege EscalationAsterisk
- CVE-2025-10380Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTIwplakeorg Advanced Views – Display Custom Fields (ACF, Pods…
- CVE-2025-9495Viessmann Vitogate 300 Authentication BypassViessmann Vitogate
- CVE-2025-9494Viessmann Vitogate 300 OS Command InjectionViessmann Vitogate
- CVE-2025-51005A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1.
- CVE-2025-55780A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document.
- CVE-2025-56394Free5gc 4.0.1 is vulnerable to Buffer Overflow.
- CVE-2025-57637Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing
- CVE-2025-57638Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.
Medium, low and unrated 80
- CVE-2025-58069AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic KeyAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2025-54855AutomationDirect CLICK PLUS Cleartext Storage of Sensitive InformationAutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1
- CVE-2024-21935Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commandsAMD Instinct™ MI300X
- CVE-2024-21927Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters iAMD Instinct™ MI300X
- CVE-2025-58354Kata Containers coco-tdx malicious host can circumvent initdata verificationkata-containers
- CVE-2025-59825astral-tokio-tar has a path traversal in tar extractionastral-sh tokio-tar · astral-tokio-tar
- CVE-2025-59822Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sectionhttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2025-58674WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) VulnerabilityWordPress
- CVE-2025-54081SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code ExecutionLizardByte Sunshine
- CVE-2025-59548DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browserdnnsoftware Dnn.Platform
- CVE-2025-59547DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscationdnnsoftware Dnn.Platform
- CVE-2025-8410Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.RTI Connext Professional
- CVE-2025-4582Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.RTI Connext Professional
- CVE-2025-59821DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profilednnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2025-59546DNN Vulnerable to Stored XSS Using Backend Admin Credentialsdnnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2025-59539DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography fielddnnsoftware Dnn.Platform · DotNetNuke.Core
- CVE-2025-0672Authentication Bypass in Multiple WSO2 Products via Stale FIDO Credential AssociationWSO2 Identity Server as Key Manager · WSO2 Identity Serv… +1
- CVE-2025-58246WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure VulnerabilityWordPress
- CVE-2025-0209Reflected Cross-Site Scripting (XSS) in WSO2 Identity Server Account Registration FlowWSO2 Identity Server
- CVE-2025-0663Potential cross-tenant account takeover vulnerability in Multiple WSO2 Products via Adaptive Authentication and Auto-LoginWSO2 Open Banking IAM · WSO2 Identity Server as Key Mana… +1
- CVE-2024-6429Content Spoofing in Multiple WSO2 Products via Error Message InjectionWSO2 Identity Server as Key Manager · WSO2 API Manager +2
- CVE-2025-5717Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin ServiceWSO2 API Manager · WSO2 Open Banking AM +3
- CVE-2025-4760Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in PublisherWSO2 API Manager · WSO2 API Control Plane +5
- CVE-2017-20200Coinomi cleartext transmissionCoinomi
- CVE-2025-6921Regular Expression Denial of Service (ReDoS) in huggingface/transformershuggingface/transformers · transformers
- CVE-2024-4598Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich MediatorWSO2 API Manager · WSO2 Micro Integrator
- CVE-2025-7106Authorization Bypass due to Incorrect Access Control in danny-avila/librechatdanny-avila/librechat
- CVE-2025-9342IDOR in Anadolu Hayat Emeklilik's AHE MobileAnadolu Hayat Emeklilik AHE Mobile
- CVE-2025-10857Campcodes Point of Sale System POS login.php sql injectionCampcodes Point of Sale System POS
- CVE-2025-10851Campcodes Gym Management System ajax.php sql injectionCampcodes Gym Management System
- CVE-2025-10848Campcodes Society Membership Information System check_student.php sql injectionCampcodes Society Membership Information System
- CVE-2025-10846Portabilis i-Educar edit sql injectionPortabilis i-Educar
- CVE-2025-10548Missing Certificate Validation in CleverControl Installer Allows Remote Code ExecutionCleverControl employee monitoring software
- CVE-2025-10845Portabilis i-Educar view sql injectionPortabilis i-Educar
- CVE-2025-10844Portabilis i-Educar aluno sql injectionPortabilis i-Educar
- CVE-2025-10843Reservation Online Hotel Reservation System paypalpayout.php sql injectionOnline Hotel Reservation System
- CVE-2025-10842code-projects Online Bidding System wew.php sql injectioncode-projects Online Bidding System
- CVE-2025-39887tracing/osnoise: Fix null-ptr-deref in bitmap_parselist()Linux
- CVE-2025-39886bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()Linux
- CVE-2025-39885ocfs2: fix recursive semaphore deadlock in fiemap callLinux
- CVE-2025-39884btrfs: fix subvolume deletion lockup caused by inodes xarray raceLinux
- CVE-2025-39883mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memoryLinux
- CVE-2025-39879ceph: always call ceph_shift_unused_folios_left()Linux
- CVE-2025-39878ceph: fix crash after fscrypt_encrypt_pagecache_blocks() errorLinux
- CVE-2025-39877mm/damon/sysfs: fix use-after-free in state_show()Linux
- CVE-2025-39876net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()Linux
- CVE-2025-39875igb: Fix NULL pointer dereference in ethtool loopback testLinux
- CVE-2025-39874macsec: sync features on RTM_NEWLINKLinux
- CVE-2025-39871dmaengine: idxd: Remove improper idxd_freeLinux
- CVE-2025-39870dmaengine: idxd: Fix double free in idxd_setup_wqs()Linux
- CVE-2025-8282SureForms < 1.9.1 - Admin+ Stored XSSSureForms
- CVE-2025-10841code-projects Online Bidding System weweee.php sql injectioncode-projects Online Bidding System
- CVE-2025-10840SourceCodester Pet Grooming Management Software print-payment.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10839SourceCodester Pet Grooming Management Software inv-print.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10837code-projects Simple Food Ordering System order.php cross site scriptingcode-projects Simple Food Ordering System
- CVE-2025-8902Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingMarketing Fire Widget Options - Extended
- CVE-2025-10836SourceCodester Pet Grooming Management Software print1.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10835SourceCodester Pet Grooming Management Software view_payorder.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10834itsourcecode Open Source Job Portal login.php sql injectionitsourcecode Open Source Job Portal
- CVE-2025-108331000projects Bookstore Management System login.php sql injection1000projects Bookstore Management System
- CVE-2025-58915WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerabilityemarket-design Request a Quote
- CVE-2025-10832SourceCodester Pet Grooming Management Software fetch_product_details.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-42907Server-Side Request Forgery in SAP BI PlatformSAP_SE SAP BI Platform
- CVE-2025-10831Campcodes Computer Sales and Inventory System pro_edit1.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-10830Campcodes Computer Sales and Inventory System inv_edit1.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-10829Campcodes Computer Sales and Inventory System sup_edit1.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-10828SourceCodester Pet Grooming Management Software edit.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10827PHPJabbers Restaurant Menu Maker preview.php cross site scriptingPHPJabbers Restaurant Menu Maker
- CVE-2025-10826Campcodes Online Beauty Parlor Management System sales-reports-detail.php sql injectionCampcodes Online Beauty Parlor Management System
- CVE-2025-10825Campcodes Online Beauty Parlor Management System view-appointment.php sql injectionCampcodes Online Beauty Parlor Management System
- CVE-2025-10824axboe fio init.c __parse_jobs_ini use after freeaxboe fio
- CVE-2025-29083SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin
- CVE-2025-29084SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad
- CVE-2025-45326An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component.
- CVE-2025-56146Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.
- CVE-2025-56304Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.
- CVE-2025-56311In Shenzhen C-Data Technology Co.
- CVE-2025-57407A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticated attacker to injecs-cart/core · gp247/core
- CVE-2025-57636OS Command injection vulnerability in D-Link C1 2020-02-21.
- CVE-2025-57639OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user