CVEs published September 30, 2025
103 CVEs were published on September 30, 2025: 12 critical, 35 high.
- Published
- 103
- Critical
- 12
- High
- 35
- Medium
- 53
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- GLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- 9
- Polska Akademia Dostępności PAD CMS
- 9
- LatePoint – Calendar Booking Plugin for Appointments and Ev…
- 4
- DLS component of NVIDIA License System
- 3
- OpenSSL
- 3
- Acronis True Image
- 2
- financejs
- 2
- IBM Planning Analytics Local
- 2
- Mozilla Firefox
- 2
- NI Circuit Design Suite
- 2
Critical 12
- CVE-2025-10659MegaSys Enterprises Telenium Online Web Application OS Command InjectionMegaSys Telenium Online Web Application:
- CVE-2025-10725Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster adminopendatahub-io opendatahub-operator · Red Hat OpenShift AI
- CVE-2025-7493Freeipa: idm: privilege escalation from host to domain admin in freeipaRed Hat Enterprise Linux
- CVE-2025-34217Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH KeyVasion Print Virtual Appliance Host · Vasion Print Applicat…
- CVE-2025-8120Remote Code Execution via Unrestricted File Upload in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-7065Remote Code Execution via Unrestricted File Upload in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-7063Remote Code Execution via Unrestricted File Upload in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-11148All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted withcheck-branches
- CVE-2025-9762Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachmentswesti Post By Email
- CVE-2025-8625Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Executioncopypressdev Copypress Rest API
- CVE-2025-61584serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflowserverless-dns
- CVE-2025-56513NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks.
High 35
- CVE-2025-24525Keysight Ixia Vision Product Family Use of Hard-coded Cryptographic KeyKeysight Ixia Vision Product Family
- CVE-2025-23293NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized actioDLS component of NVIDIA License System
- CVE-2025-6034Out of Bounds Read in DefaultFontOptions() in NI Circuit Design SuiteNI Circuit Design Suite
- CVE-2025-6033Memory Corruption issue in XML_Serialize() in NI Circuit Design SuiteNI Circuit Design Suite
- CVE-2025-7779Local privilege escalation due to insecure XPC service configuration.Acronis True Image
- CVE-2025-11178Local privilege escalation due to DLL hijacking vulnerability.Acronis True Image
- CVE-2025-9230Out-of-bounds read & write in RFC 3211 KEK UnwrapOpenSSL
- CVE-2025-11153JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox
- CVE-2025-11152Sandbox escape due to integer overflow in the Graphics: Canvas2D componentMozilla Firefox
- CVE-2025-41098Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41099Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41097Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41096Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41095Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41094Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41093Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41092Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-41091Insecure Direct Object Reference in GPS BOLD WorkplannerGLOBAL PLANNING SOLUTIONS S.L (GPS) BOLD Workplanner
- CVE-2025-8122Blind SQL Injection in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-8121Blind SQL Injection in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-8117Account Takeover via Reset Password Functionality in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-8877AffiliateWP <= 2.28.2 - Unauthenticated SQL InjectionAffiliateWP
- CVE-2025-11149This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static.node-static · @nubosoftware/node-static
- CVE-2025-7052LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() FunctionLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2025-7038LatePoint <= 5.1.94 - Unauthenticated Authentication Bypass via load_step FunctionLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2025-59668Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability.NIHON KOHDEN Central Monitor CNS-6201
- CVE-2025-9991Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusionmigli Tiny Bootstrap Elements Light
- CVE-2025-9993Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusiond3rd4v1d Bei Fen – WordPress Backup Plugin
- CVE-2025-10991Root Access via UARTTP-Link Systems Tapo D230S1
- CVE-2024-55017Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to inter
- CVE-2025-56132LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality.
- CVE-2025-56301An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 (2025-01-29) allowing attackers to corr
- CVE-2025-56392An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate o
- CVE-2025-56571Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter.financejs
- CVE-2025-56572An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.financejs
Medium, low and unrated 56
- CVE-2025-55191Repository Credentials Race Condition Crashes Argo CD Serverargoproj argo-cd · github.com/argoproj/argo-cd +2
- CVE-2025-43826Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupporteLiferay Portal · Liferay DXP +1
- CVE-2025-36262IBM Planning Analytics Local information disclosureIBM Planning Analytics Local
- CVE-2025-36132IBM Planning Analytics Local cross-site scriptingIBM Planning Analytics Local
- CVE-2025-43827Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported verLiferay Portal · Liferay DXP +2
- CVE-2025-11195Rapid7 AppSpider Project Name Validation BypassRapid7 AppSpider Pro
- CVE-2025-23292NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an auDLS component of NVIDIA License System
- CVE-2025-23291NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized actioDLS component of NVIDIA License System
- CVE-2025-54477Joomla! Core - [20250902] User-Enumeration in passkey authentication methodJoomla! Project Joomla! CMS
- CVE-2025-54476Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter codeJoomla! Project Joomla! CMS · joomla/filter
- CVE-2025-57852Openshift-ai: privilege escalation via excessive /etc/passwd permissionsRed Hat OpenShift AI
- CVE-2025-9232Out-of-bounds read in HTTP client no_proxy handlingOpenSSL
- CVE-2025-9231Timing side-channel in SM2 algorithm on 64 bit ARMOpenSSL
- CVE-2025-10859Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabsMozilla Firefox for iOS
- CVE-2025-10217A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject craftHitachi Energy Asset Suite
- CVE-2025-8119Cross-Site Request Forgery in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-8118Bruteforce Protection Bypass in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-8116Reflected XSS in PAD CMSPolska Akademia Dostępności PAD CMS
- CVE-2025-11163SmartCrawl SEO checker, analyzer & optimizer <= 3.14.3 - Missing Authorization to Plugin Settings Updatewpmudev SmartCrawl SEO checker, analyzer & optimizer
- CVE-2025-6941LatePoint <= 5.1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2025-6815LatePoint <= 5.1.94 - Authenticated (Administrator+) Stored Cross-Site ScriptingLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2025-8777planetcalc <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via language Parameterplanetcalc
- CVE-2025-10196SurveyAnyplace Plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingsdebois Survey Anyplace
- CVE-2025-9946LockerPress – WordPress Security Plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site ScriptingLockerPress – WordPress Security Plugin
- CVE-2025-8214The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widgetwebangon The Pack Elementor addon
- CVE-2025-10128Eulerpool Research Systems <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingmichaellow Eulerpool Research Systems
- CVE-2025-8608Mihdan: Elementor Yandex Maps <= 1.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marker Pinsmihdan Maps from Yandex for Elementor
- CVE-2025-10189BP Direct Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingmrwulf BP Direct Menus
- CVE-2025-10168Any News Ticker <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingmucasoft Any News Ticker
- CVE-2025-9948Chat by Chatwee <= 2.1.3 - Cross-Site Request Forgery to Settings Updatepaulq Chat by Chatwee
- CVE-2025-10182dbview <= 0.5.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingjohn-ackers dbview
- CVE-2025-8559All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parametersanzeeb3 All in One Music Player
- CVE-2025-8624Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widgetwpdive Nexa Blocks – Gutenberg Blocks, Page Builder for Gut…
- CVE-2025-10191Big Post Shipping for WooCommerce <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingfusedsoftware Big Post Shipping for WooCommerce
- CVE-2025-8623WeedMaps Menu for WordPress <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via weedmaps_menu Shortcodebmoredrew WeedMaps Menu for WordPress
- CVE-2025-10131All Social Share Options <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingcodiblog All Social Share Options
- CVE-2025-9852Yoga Schedule Momoyoga <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingmomostefan Yoga Schedule Momoyoga
- CVE-2025-8560FancyTabs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameterghosttoast FancyTabs
- CVE-2025-10000Qyrr – simply and modern QR-Code creation <= 2.0.7 - Authenticated (Contributor+) Arbitrary File Uploadwpchill Qyrr – simply and modern QR-Code creation
- CVE-2025-10130Layers <= 0.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingstripeswp Layers
- CVE-2025-10179My AskAI <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingmyaskai My AskAI
- CVE-2025-8566GutenBee – Gutenberg Blocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingcssigniterteam GutenBee – Gutenberg Blocks
- CVE-2025-28016A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login a
- CVE-2025-52043In Frappe ERPNext v15.57.5, the function import_coa() at erpnext/accounts/doctype/chart_of_accounts_importer/chart_of_accounts_importer.py i
- CVE-2025-52047In Frappe ErpNext v15.57.5, the function get_income_account() at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows
- CVE-2025-52049In Frappe ErpNext v15.57.5, the function get_timesheet_detail_rate() at erpnext/projects/doctype/timesheet/timesheet.py is vulnerable to SQL
- CVE-2025-52050In Frappe ERPNext 15.57.5, the function get_loyalty_program_details_with_points() at erpnext/accounts/doctype/loyalty_program/loyalty_progra
- CVE-2025-55797An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers FormCMS
- CVE-2025-56018SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the
- CVE-2025-56200A URL validation bypass vulnerability exists in validator.js through version 13.15.15.validator
- CVE-2025-56207A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fu
- CVE-2025-56520Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUplo
- CVE-2025-56675The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to the EKEN cloud servers with sensitive informaEKEN video doorbell T6
- CVE-2025-56676TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality.
- CVE-2025-57254An SQL injection vulnerability in user-login.php and index.php of Karthikg1908 Hospital Management System (HMS) 1.0 allows remote attackers
- CVE-2025-61792Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, Quadient DS-700 iQ