Archive
September 2025
Vulnerabilities first published in this month (UTC), newest first.
4,347 results · Feed
-
Medium 6.0
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative pr…
-
Medium 6.1
A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attac…
-
Medium 6.5
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker…
-
Medium 6.7
Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privile…
-
High 7.4
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches c…
-
High 7.7
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges t…
-
High 7.7
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an auth…
-
High 7.7
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softw…
KEV Sep 29, 2025 -
High 8.1
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could all…
-
High 8.6
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an una…
-
High 8.8
A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands tha…
-
Medium 5.8
Cisco SD-WAN vEdge Software Access Control List Bypass Vulnerability
A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny a…
-
Medium 4.3
A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an u…
-
Medium 4.3
A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allo…
-
Low 2.4
Mangati NovoSGA SVG File admin cross site scripting
A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the file /admin of the component SVG File Handler. Performing manipulation of the argument logoNavbar/logoLogin results in cross site scripting.…
-
High 8.8
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap c…
-
High 8.8CVE-2025-10891 Public exploit
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap c…
-
Critical 9.1
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross…
-
High 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap c…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap cor…
KEV Sep 23, 2025 -
Medium 6.9
Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterpr…
-
High 7.8
Release of Invalid Pointer or Reference in Android Core
Memory corruption while handling invalid inputs in application info setup.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while processing power control requests with invalid antenna or stream values.
-
High 7.8
Use After Free in Camera
Memory corruption while encoding the image data.
-
High 7.5
Buffer Over-read in WLAN HAL
Transient DOS while handling command data during power control processing.
-
High 7.5
Buffer Over-read in BT Controller
Transient DOS while parsing the EPTM test control message to get the test pattern.
-
High 7.8
Buffer Over-read in BT Controller
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
-
High 7.8
Double Free in Video
Memory corruption due to double free when multiple threads race to set the timestamp store.
-
High 7.8
Use After Free in Automotive Software platform based on QNX
Memory corruption while handling repeated memory unmap requests from guest VM.
-
High 7.8
Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver.
-
High 7.8
Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM.
-
High 7.8
Use After Free in Camera Driver
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure when Video engine escape input data is less than expected minimum size.
-
Critical 9.8
Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list.
-
Medium 6.1
Buffer Over-read in Video
Information disclosure while running video usecase having rogue firmware.
-
High 7.8
Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
-
Medium 6.1
Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.