Archive

24 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /24 October 2025 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.7

CVE-2025-20352 Exploited Public exploit EPSS 41%

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…

Cisco Cisco IOS XE Software IOS Cisco IOS XE Catalyst SD-WAN iOS Network devices

Sep 24, 2025
KEV Sep 29, 2025
High 8.8

CVE-2025-10891 Public exploit

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Sep 24, 2025
High 8.8

CVE-2025-10585 Exploited Public exploit

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi

Sep 24, 2025
KEV Sep 23, 2025
High 7.2

CVE-2025-48868 Public exploit

Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive

Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project…

horilla-opensource horilla

Sep 24, 2025
High 7.1

CVE-2025-56815 Public exploit

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses…

Sep 24, 2025