CVEs published September 29, 2025
119 CVEs were published on September 29, 2025: 21 critical, 31 high. 1 is now in CISA KEV.
- Published
- 119
- Critical
- 21
- High
- 31
- Medium
- 63
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 66
Most affected products
- Vasion Print Virtual Appliance Host · Vasion Print Applicat…
- 22
- Esri Portal for ArcGIS
- 9
- FreshRSS
- 7
- Perfex CRM
- 6
- Medical Informatics Engineering Enterprise Health
- 5
- Liferay Portal · Liferay DXP +1
- 4
- Canon Generic Plus PCL6 Printer Driver · Canon Generic… +11
- 3
- Liferay Portal · Liferay DXP +2
- 3
- Apt-Cacher-NG
- 2
- Bjskzy Zhiyou ERP
- 2
Critical 21
- CVE-2024-58040Crypt::RandomEncryption for Perl uses insecure rand() function during encryptionQWER Crypt::RandomEncryption
- CVE-2025-59954Knowage Contains a Remote Code Execution VulnerabilityKnowageLabs Knowage-Server
- CVE-2025-54875FreshRSS: Unauthorized creation of admin user when registration is enabledFreshRSS
- CVE-2025-30247An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remotWestern Digital My Cloud
- CVE-2025-34235Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCEVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34221Vasion Print (formerly PrinterLogic)Vasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34215Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCEVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34224Vasion Print (formerly PrinterLogic) Unauthenticated Device ModificationVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34222Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL CertificatesVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34216Vasion Print (formerly PrinterLogic) RCE and Password Leaks via APIVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34223Vasion Print (formerly PrinterLogic) Insecure Installation CredentialsVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34211Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private KeysVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34209Vasion Print (formerly PrinterLogic) Hardcoded GPG Private KeyVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34234Vasion Print (formerly PrinterLogic) Hardcoded Encryption Private KeysVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34218Vasion Print (formerly PrinterLogic) Exposed Internal Docker InstanceVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34196Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded PasswordVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2024-13150SQLi in Fayton Software's fayton.pro ERPFayton Software and Consulting Services fayton.pro ERP
- CVE-2025-8868Chef Automate compliance service SQL Injection VulnerabilityProgress Software Chef Automate
- CVE-2025-11126Apeman ID71 system.ini hard-coded credentialsApeman ID71
- CVE-2025-56795Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality.
- CVE-2025-57266An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attackers t
High 31
- CVE-2025-59952minio-java Client XML Tag is Vulnerable to Value Substitutionminio-java · io.minio:minio
- CVE-2025-59942go-f3 module vulnerable to integer overflow leading to panicfilecoin-project go-f3 · github.com/filecoin-project/go-f3
- CVE-2025-36245IBM InfoSphere Information Server command executionIBM InfoSphere Information Server
- CVE-2025-59937go-mail has insufficient address encoding when passing mail addresses to the SMTP clientwneessen go-mail · github.com/wneessen/go-mail
- CVE-2025-54592FreshRSS has Incomplete Session Termination on LogoutFreshRSS
- CVE-2025-54591FreshRSS: Unauthenticated users can view default user's informationFreshRSS
- CVE-2025-34228Vasion Print (formerly PrinterLogic) SSRF via Lexmark update.phpVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34231Vasion Print (formerly PrinterLogic) SSRF via HP badgeSetup.phpVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34225Vasion Print (formerly PrinterLogic) SSRF via console_release DirectoryVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34233Vasion Print (formerly PrinterLogic) Insecure Use of file_get_contents()Vasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34207Vasion Print (formerly PrinterLogic) Insecure SSH Client ConfigurationVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34212Vasion Print (formerly PrinterLogic) Insecure Build PipelineVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-45376Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerabiliDell Repository Manager
- CVE-2025-35030Medical Informatics Engineering Enterprise Health cross site request forgeryMedical Informatics Engineering Enterprise Health
- CVE-2025-41252Username enumeration vulnerabilityVMware NSX
- CVE-2025-41251Weak password recovery vulnerabilityvmware NSX
- CVE-2025-41250Header injection vulnerabilityVMware vCenter · VMware Cloud Foundation +3
- CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)VMware VCF operations · VMware tools +4
- CVE-2025-41246Improper authorisation vulnerabilityVMware Tools
- CVE-2025-9648Denial of Service in CivetWebCivetWeb
- CVE-2025-6724Chef Automate SQL Injection VulnerabilityProgress Software Chef Automate
- CVE-2025-48006Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier.Saison Technology Co. DataSpider Servista
- CVE-2025-11130iHongRen pptp-vpn XPC Service HelperTool.m shouldAcceptNewConnection missing authenticationiHongRen pptp-vpn
- CVE-2024-57412An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly sending crafted TCP packets.
- CVE-2025-51495An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17.
- CVE-2025-56233Openindiana, kernel SunOS 5.11 has a denial of service vulnerability.
- CVE-2025-56234AT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability.
- CVE-2025-56449A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0.
- CVE-2025-57424A stored cross-site scripting (XSS) vulnerability exists in the MyCourts v3 application within the LTA number profile field.
- CVE-2025-57483A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the co
- CVE-2025-57516OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary com
Medium, low and unrated 67
- CVE-2025-59956AgentAPI exposed user chat history via a DNS rebinding attackcoder agentapi · github.com/coder/agentapi
- CVE-2025-59950FreshRSS: Double clickjacking can lead to privilege escalationFreshRSS
- CVE-2025-61586FreshRSS is vulnerable to directory enumeration by setting path in its theme fieldFreshRSS
- CVE-2025-59948FreshRSS is vulnerable to XSS due to lack of CSP on HTML query pageFreshRSS
- CVE-2025-59941go-f3 is Vulnerable to Cached Justification Verification Bypassfilecoin-project go-f3 · github.com/filecoin-project/go-f3
- CVE-2025-43817Multiple reflected cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.74 through 7.4.3.111, and Liferay DXP 2023.Q4.0 througLiferay Portal · Liferay DXP +1
- CVE-2025-59940mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholdersmondeja mkdocs-include-markdown-plugin · mkdocs-include-mar…
- CVE-2025-43813Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsuppoLiferay Portal · Liferay DXP +2
- CVE-2025-43812Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 throLiferay Portal · Liferay DXP +2
- CVE-2025-59933libvips is vulnerable to Buffer Over-Read in poppler-based pdfloadlibvips
- CVE-2025-43811Multiple stored cross-site scripting (XSS) vulnerability in the related asset selector in Liferay Portal 7.4.3.50 through 7.4.3.111, and LifLiferay Portal · Liferay DXP +1
- CVE-2025-59163vet MCP Server SSE Transport DNS Rebinding Vulnerabilitysafedep vet · github.com/safedep/vet
- CVE-2025-43820Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when inviting users to a event in Liferay Portal 7.4.3.35 throughLiferay Portal · Liferay DXP +2
- CVE-2025-43818Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 throLiferay Portal · Liferay DXP +1
- CVE-2025-57769FressRSS: Clickjacking can lead to XSS and/or privilege escalationFreshRSS
- CVE-2025-43815Reflected cross-site scripting (XSS) vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and LiferayLiferay Portal · Liferay DXP +1
- CVE-2025-34220Vasion Print (formerly PrinterLogic) Unauthenticated API Leaks Group InformationVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34229Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.phpVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34230Vasion Print (formerly PrinterLogic) Blind SSRF via HP log_off_single_sign_on.phpVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-34232Vasion Print (formerly PrinterLogic) Blind SSRF via Lexmark dellCheck.phpVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-35034Medical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_idMedical Informatics Engineering Enterprise Health
- CVE-2025-35033Medical Informatics Engineering Enterprise Health CSV injectionMedical Informatics Engineering Enterprise Health
- CVE-2025-35032Medical Informatics Engineering Enterprise Health arbitrary file uploadMedical Informatics Engineering Enterprise Health
- CVE-2025-35031Medical Informatics Engineering Enterprise Health includes session token in debug outputMedical Informatics Engineering Enterprise Health
- CVE-2025-57871BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)Esri Portal for ArcGIS
- CVE-2025-57872BUG-000174150 - Unvalidated redirect in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2025-57873BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2025-57874BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS. (11.3, 11.1, 10.9.1)Esri Portal for ArcGIS
- CVE-2025-57875BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2025-57877Reflected XSS vulnerability in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2025-57878BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.Esri Portal for ArcGIS
- CVE-2025-57879BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2025-57876Stored XSS vulnerability in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2025-36099IBM WebSphere Application Server denial of serviceIBM WebSphere Application Server
- CVE-2025-43400An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-7104Mass Assignment in danny-avila/librechatdanny-avila/librechat
- CVE-2025-41245VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)VMware Aria Operations · VMware Cloud Foundation +2
- CVE-2025-11155WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATIONSATO S86-ex 203dpi
- CVE-2025-36351IBM License Metric Tool bypass securityIBM License Metric Tool
- CVE-2025-36352IBM License Metric Tool cross-site scriptingIBM License Metric Tool
- CVE-2025-11147Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NGApt-Cacher-NG
- CVE-2025-11146Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NGApt-Cacher-NG
- CVE-2025-10346HTML injection in Perfex CRMPerfex CRM
- CVE-2025-10345HTML injection in Perfex CRMPerfex CRM
- CVE-2025-10344HTML injection in Perfex CRMPerfex CRM
- CVE-2025-10343HTML injection in Perfex CRMPerfex CRM
- CVE-2025-10342HTML injection in Perfex CRMPerfex CRM
- CVE-2025-10341HTML injection in Perfex CRMPerfex CRM
- CVE-2024-5200Postie < 1.9.71 - Admin+ Stored XSSPostie
- CVE-2025-11141Ruijie NBR2100G-E branch_passw.php listAction os command injectionRuijie NBR2100G-E
- CVE-2025-10504Heap Memory Corruption VulnerabilityABB Terra AC wallbox
- CVE-2025-11140Bjskzy Zhiyou ERP com.artery.richclient.RichClientService openForm xml external entity referenceBjskzy Zhiyou ERP
- CVE-2025-11139Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversalBjskzy Zhiyou ERP
- CVE-2025-11138mirweiye wenkucms common.php createPathOne os command injectionmirweiye wenkucms
- CVE-2025-11137Gstarsoft GstarCAD File Renaming cross site scriptingGstarsoft GstarCAD
- CVE-2025-11136YiFang CMS Backend File.php webUploader unrestricted uploadYiFang CMS
- CVE-2025-11135pmTicket Project-Management-Software Cookie class.database.php loadLanguage deserializationpmTicket Project-Management-Software
- CVE-2025-11134Cudy TR1200 Wireless Settings config cross site scriptingCudy TR1200
- CVE-2025-7698Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic PlCanon Generic Plus PCL6 Printer Driver · Canon Generic… +11
- CVE-2025-9904Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / GenerCanon Generic Plus PCL6 Printer Driver · Canon Generic… +11
- CVE-2025-9903Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic PCanon Generic Plus PCL6 Printer Driver · Canon Generic… +11
- CVE-2025-55795The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during e
- CVE-2025-56764Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning different error mess
- CVE-2025-56807A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaSc
- CVE-2025-57197In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change featu
- CVE-2025-57428Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug
- CVE-2025-61659bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.magicmonty bash-git-prompt