CVEs published September 25, 2025
108 CVEs were published on September 25, 2025: 9 critical, 39 high. 2 are now in CISA KEV.
- Published
- 108
- Critical
- 9
- High
- 39
- Medium
- 54
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 46
Most affected products
- torch
- 12
- Wavlink NU516U1
- 7
- Ericsson Indoor Connect
- 5
- JeecgBoot
- 5
- geyang ml-logger · ml-logger
- 3
- iMonitor Software iMonitor EAM
- 3
- Zenitel ICX500 · Zenitel ICX510
- 3
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- 2
- Dingtian DT-R002
- 2
- glib-networking · Red Hat Enterprise Linux
- 2
Critical 9
- CVE-2025-11005TOTOLINK X6000R Unauthenticated Command Injection VulnerabilityTOTOLINK X6000R
- CVE-2025-20363A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat DefensCisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1
- CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat DCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2025-59841FlagForgeCTF's Improper Session Handling Allows Access After LogoutFlagForgeCTF flagForge
- CVE-2020-36851Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRFRob--W / cors-anywhere · cors-anywhere
- CVE-2025-59832Horrila Stored XSS Vulnerability via Ticket Comment sectionhorilla-opensource horilla
- CVE-2025-10542Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAMiMonitor Software iMonitor EAM
- CVE-2025-59823Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioninggardener-extension-provider-aws · github.com/gardener/ga… +3
- CVE-2025-59834Command Injection in adb-mcp MCP Serversrmorete adb-mcp · adb-mcp
High 39
- CVE-2025-43993Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Dell Wireless
- CVE-2025-59817Authenticated Remote Code Execution in zForm_auto_configZenitel TCIS-3+
- CVE-2025-59816Authenticated Union based SQL-injection in the search input fieldZenitel ICX500 · Zenitel ICX510
- CVE-2025-59815Authenticated Remote Code Execution in the Billing Administration portalZenitel ICX500 · Zenitel ICX510
- CVE-2025-59814Unauthenticated SQL-injection in password fieldZenitel ICX500 · Zenitel ICX510
- CVE-2025-34227Nagios XI < 2026R1 Configuration Wizard Authenticated Command InjectionNagios XI
- CVE-2025-10880Insufficiently Protected Credentials in Dingtian DT-R002Dingtian DT-R002
- CVE-2025-10879Insufficiently Protected Credentials in Dingtian DT-R002Dingtian DT-R002
- CVE-2025-10953UTT 1200GW/1250GW formApMail buffer overflowUTT 1200GW · UTT 1250GW
- CVE-2024-48014Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability.Dell BSAFE Micro Edition Suite
- CVE-2025-40837Ericsson Indoor Connect 8855 - Missing Authorization VulnerabilityEricsson Indoor Connect
- CVE-2025-40836Ericsson Indoor Connect 8855 - Improper Input Validation VulnerabilityEricsson Indoor Connect
- CVE-2025-27262Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command VulnerabilityEricsson Indoor Connect
- CVE-2025-59830Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parametersrack
- CVE-2025-10541Local Privilege Escalation via Insecure Update Mechanism in iMonitor EAMiMonitor Software iMonitor EAM
- CVE-2025-10948MikroTik RouterOS libjson.so print parse_json_element buffer overflowMikroTik RouterOS
- CVE-2025-59839Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributesStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2025-27261Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command VulnerabilityEricsson Indoor Connect
- CVE-2025-59831`git-comiters` Command Injection vulnerabilitysnowyu git-commiters.js · git-commiters
- CVE-2025-10467Stored XSS in Proliz Software's OBSPROLIZ Computer Software Hardware Service Trade Ltd. OBS
- CVE-2025-10449Path Traversal in Saysis Computer Systems' Saysis Web PortalSaysis Computer Systems Trade Ltd. Saysis Web Portal
- CVE-2025-10957Unrestricted FTP Access Vulnerability in Syrotech RouterSyrotech Networks Syrotech SY-GPON-2010-WADONT
- CVE-2025-40698SQL injection vulnerability in PrevengosNedatec Consulting Prevengos
- CVE-2025-10942H3C Magic B3 aspForm EditMacList buffer overflowH3C Magic B3
- CVE-2025-10941Topaz SERVCore Teller Installer SERVCoreTeller_2.0.40D.msi permissionTopaz SERVCore Teller
- CVE-2025-10438Path Traversal in Yordam BT's Yordam KatalogYordam Information Technology Consulting Education and Elec…
- CVE-2025-26278A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted paydref
- CVE-2025-48707An issue was discovered in Stormshield Network Security (SNS) before 5.0.1.
- CVE-2025-55551An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice opertorch
- CVE-2025-55553A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).torch
- CVE-2025-55557A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Servtorch
- CVE-2025-55558A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensotorch
- CVE-2025-55559An issue was discovered TensorFlow v2.18.0.
- CVE-2025-55560An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.torch
- CVE-2025-57317apidoc-core is the core parser library to generate apidoc result following the apidoc-spec.apidoc-core
- CVE-2025-57446An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS)
- CVE-2025-57632libsmb2 6.2+ is vulnerable to Buffer Overflow.
- CVE-2025-59404Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked.
- CVE-2025-59408Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with Secure Boot disabled.
Medium, low and unrated 60
- CVE-2025-10980JeecgBoot exportXls improper authorizationJeecgBoot
- CVE-2025-10979JeecgBoot exportXls improper authorizationJeecgBoot
- CVE-2025-10978JeecgBoot Filter exportXls improper authorizationJeecgBoot
- CVE-2025-10977JeecgBoot deleteBatch improper authorizationJeecgBoot
- CVE-2025-10976JeecgBoot getDepartUserList improper authorizationJeecgBoot
- CVE-2025-10975GuanxingLu vlarl ZeroMQ reasoning_server.py run_reasoning_server deserializationGuanxingLu vlarl
- CVE-2025-10974giantspatula SewKinect Endpoint calculate pickle.loads deserializationgiantspatula SewKinect
- CVE-2025-26482Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.Dell PowerEdge R770 · Dell PowerEdge R670 +110
- CVE-2025-10973JackieDYH Resume-management-system show.php sql injectionJackieDYH Resume-management-system
- CVE-2025-43816A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and LifeLiferay Portal · Liferay DXP +1
- CVE-2025-10967MuFen-mker PHP-Usermm chkuser.php sql injectionMuFen-mker PHP-Usermm
- CVE-2025-10965LazyAGI LazyLLM server.py lazyllm_call deserializationLazyAGI LazyLLM
- CVE-2025-10964Wavlink NU516U1 firewall.cgi sub_401B30 command injectionWavlink NU516U1
- CVE-2025-10963Wavlink NU516U1 firewall.cgi sub_4016F0 command injectionWavlink NU516U1
- CVE-2025-10962Wavlink NU516U1 SetName wireless.cgi sub_403198 command injectionWavlink NU516U1
- CVE-2025-10961Wavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injectionWavlink NU516U1
- CVE-2025-10960Wavlink NU516U1 DeleteMac wireless.cgi sub_402D1C command injectionWavlink NU516U1
- CVE-2025-10959Wavlink NU516U1 firewall.cgi sub_401778 command injectionWavlink NU516U1
- CVE-2025-10958Wavlink NU516U1 AddMac wireless.cgi sub_403010 command injectionWavlink NU516U1
- CVE-2025-20362Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2025-60019Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()glib-networking · Red Hat Enterprise Linux
- CVE-2025-60018Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"glib-networking · Red Hat Enterprise Linux
- CVE-2025-10952geyang ml-logger File server.py stream_handler information disclosuregeyang ml-logger · ml-logger
- CVE-2025-43943Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('ODell Cloud Disaster Recovery
- CVE-2025-26333Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data.Dell BSAFE Crypto-J
- CVE-2025-10911Libxslt: use-after-free with key data stored cross-rvtlibxslt · Red Hat Enterprise Linux +8
- CVE-2025-33116IBM Watson Studio on Cloud Pak for Data cross-site scriptingIBM Watson Studio on Cloud Pak for Data
- CVE-2025-10951geyang ml-logger server.py log_handler path traversalgeyang ml-logger · ml-logger
- CVE-2025-36601Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerabiliDell PowerScale OneFS
- CVE-2025-40838Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials VulnerabilityEricsson Indoor Connect
- CVE-2025-59838Monkeytype Vulnerable to Self-XSS on loading saved custom textmonkeytypegame monkeytype
- CVE-2025-36857Rapid7 Appspider Broken Access Control VulnerabilityRapid7 Appspider Pro
- CVE-2025-10950geyang ml-logger Ping server.py log_handler deserializationgeyang ml-logger · ml-logger
- CVE-2025-10949Changsha Developer Technology iView Editor Markdown cross site scriptingChangsha Developer Technology iView Editor
- CVE-2025-10540Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAMiMonitor Software iMonitor EAM
- CVE-2025-59426lobe-chat has an Open Redirectlobehub lobe-chat · @lobehub/chat
- CVE-2025-59422Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Otherslanggenius dify
- CVE-2025-5494Privilege EscalationZohocorp Endpoint Central
- CVE-2025-10947Sistemas Pleno Gestão de Locação CPF validarCpf authorizationSistemas Pleno Gestão de Locação
- CVE-2025-10946nuz007 smsboom dy.php cross site scriptingnuz007 smsboom
- CVE-2025-10945nuz007 smsboom d.php cross site scriptingnuz007 smsboom
- CVE-2025-10944yi-ge get-header-ip ip.php cross site scriptingyi-ge get-header-ip
- CVE-2025-10943MikeCen WeChat-Face-Recognition wx.php valid cross site scriptingMikeCen WeChat-Face-Recognition
- CVE-2025-10940Total.js CMS Layout admin layouts_save cross site scriptingTotal.js CMS
- CVE-2025-21056Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices.Samsung Mobile Retail Mode
- CVE-2025-29155An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint
- CVE-2025-29156Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v
- CVE-2025-29157An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server retur
- CVE-2025-46148In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.torch
- CVE-2025-46149In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.torch
- CVE-2025-46150In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.torch
- CVE-2025-46152In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.torch
- CVE-2025-46153PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU impltorch
- CVE-2025-55552pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.torch
- CVE-2025-55554pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().torch
- CVE-2025-55556TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application.
- CVE-2025-56769An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary methcn.hutool:hutool-extra
- CVE-2025-57623A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service.
- CVE-2025-59402Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL
- CVE-2025-60249vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundlCIRCL vulnerability-lookup