İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2025: sömürülen ve yeni ciddi CVE kayıtları

197 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2025-6507
    44Planlayın

    Deserialization of Untrusted Data in h2oai/h2o-3

    KritikCVSS 9,8İstismar yokEPSS %16

    h2oai · h2oai/h2o-31 Eyl 2025

  • CVE-2022-38691
    31İzleyin

    In BootROM, there is a possible missing validation for Certificate Type 0.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    unisoc (shanghai) technologies co., ltd. · sc9863a//t310/t610/t618/1 Eyl 2025

  • CVE-2022-38694
    31İzleyin

    In BootRom, there is a possible unchecked write address.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    unisoc (shanghai) technologies co., ltd. · sc9863a//t310/t610/t618/1 Eyl 2025

  • CVE-2025-9769
    12İzleyin

    D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection

    DüşükCVSS 0,9İstismar yokEPSS %29

    dlink · di-7400g\+ firmware1 Eyl 2025

  • CVE-2024-28988
    51Planlayın

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    solarwinds · web help desk1 Eyl 2025

  • CVE-2025-57808
    32İzleyin

    ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    esphome · esphome firmware2 Eyl 2025

  • CVE-2025-46047
    26İzleyin

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    silverpeas · silverpeas2 Eyl 2025

  • CVE-2024-48705
    27İzleyin

    Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection wh

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    wavlink · wl-wn531p3 firmware2 Eyl 2025

  • CVE-2025-50565
    26İzleyin

    Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    doubo erp project · doubo erp2 Eyl 2025

  • CVE-2025-9784
    31İzleyin

    Undertow: undertow madeyoureset http/2 ddos vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    redhat · build of apache camel for spring boot2 Eyl 2025

  • CVE-2025-22442
    28İzleyin

    In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    google · android2 Eyl 2025

  • CVE-2024-32444
    39İzleyin

    WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    inspirythemes · realhomes3 Eyl 2025

  • CVE-2025-56608
    16İzleyin

    The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in `OkHttpClientWrapper.java`

    OrtaCVSS 4,2Kavram kanıtıEPSS %0

    donbermoy · android corona virus tracker app for india3 Eyl 2025

  • CVE-2025-57052
    39İzleyin

    cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote at

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    davegamble · cjson3 Eyl 2025

  • CVE-2025-38678
    22İzleyin

    netfilter: nf_tables: reject duplicate device on updates

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel3 Eyl 2025

  • CVE-2025-53691
    35İzleyin

    Sitecore Experience Remote Code Execution through Insecure Deserialization

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    sitecore · experience commerce3 Eyl 2025

  • CVE-2025-53693
    45Planlayın

    HTML Cache Poisoning through Unsafe Reflections

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    sitecore · experience commerce3 Eyl 2025

  • CVE-2025-53694
    32İzleyin

    Information Disclosure in ItemServices API

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    sitecore · experience commerce3 Eyl 2025

  • CVE-2025-45805
    30İzleyin

    In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    phpgurukul · doctor appointment management system3 Eyl 2025

  • CVE-2025-56803
    33İzleyin

    Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader.

    YüksekCVSS 8,4Kavram kanıtıEPSS %1

    figma · desktop3 Eyl 2025

  • CVE-2025-55747
    38İzleyin

    XWiki Platform's configuration files can be accessed through the webjars API

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    xwiki · xwiki3 Eyl 2025

  • CVE-2025-57833
    40Planlayın

    An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.

    YüksekCVSS 8,1Kavram kanıtıEPSS %26

    djangoproject · django3 Eyl 2025

  • CVE-2025-53690
    84Hemen

    Sitecore Products ViewState Deserialization Vulnerability

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %60

    sitecore · experience commerce3 Eyl 2025

  • CVE-2025-55748
    38İzleyin

    XWiki Platform's configuration files can be accessed through jsx and sx endpoints

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    xwiki · xwiki3 Eyl 2025

  • CVE-2025-6085
    28İzleyin

    Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    celonis · make connector4 Eyl 2025

  • CVE-2025-9519
    28İzleyin

    Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    kleor · easy timer4 Eyl 2025

  • CVE-2025-9933
    22İzleyin

    PHPGurukul Beauty Parlour Management System view-appointment.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    phpgurukul · beauty parlour management system4 Eyl 2025

  • CVE-2025-6984
    30İzleyin

    Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    langchain-ai · langchain-ai/langchain4 Eyl 2025

  • CVE-2025-8311
    38İzleyin

    dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint.

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    dotcms · dotcms cloud services (dcs)4 Eyl 2025

  • CVE-2025-57576
    21İzleyin

    PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    phpgurukul · online shopping portal4 Eyl 2025

  • CVE-2025-0087
    20İzleyin

    In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check.

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-26443
    29İzleyin

    In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unknown sources due to

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-22441
    29İzleyin

    In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privile

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-32324
    31İzleyin

    In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-48543
    65Bu hafta

    In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-48561
    22İzleyin

    In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-58179
    26İzleyin

    Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpoint

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    astro · \@astrojs\/cloudflare4 Eyl 2025

  • CVE-2025-54914
    40Planlayın

    Azure Networking Elevation of Privilege Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    microsoft · azure networking4 Eyl 2025

  • CVE-2025-55190
    41Planlayın

    Argo CD: Project API Token Exposes Repository Credentials

    KritikCVSS 9,9Kavram kanıtıEPSS %5

    argoproj · argo cd4 Eyl 2025

  • CVE-2025-58789
    30İzleyin

    WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    themeisle · wp full stripe free5 Eyl 2025

  • CVE-2025-58780
    28İzleyin

    index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request.

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    sciencelogic · sl15 Eyl 2025

  • CVE-2025-9998
    24İzleyin

    Improper validation of packets sequencing

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    arcinfo · pcvue5 Eyl 2025

  • CVE-2025-58788
    30İzleyin

    WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    saad iqbal · license manager for woocommerce5 Eyl 2025

  • CVE-2025-39682
    70Bu hafta

    tls: fix handling of zero-length records on the rx_list

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2

    linux · linux kernel5 Eyl 2025

  • CVE-2025-58371
    39İzleyin

    Roo Code is vulnerable to command injection via GitHub actions workflow

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    roocode · roo code5 Eyl 2025

  • CVE-2025-10046
    19İzleyin

    ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejction

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    elextensions · elex woocommerce google shopping (google product feed)6 Eyl 2025

  • CVE-2025-9961
    37İzleyin

    Authenticated RCE by CWMP binary

    YüksekCVSS 8,6Kavram kanıtıEPSS %10

    tp-link systems inc. · ax10 v1/v1.2/v2/v2.6/v3/v3.66 Eyl 2025

  • CVE-2025-8359
    39İzleyin

    AdForest <= 6.0.9 - Authentication Bypass to Admin

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    scriptsbundle · adforest6 Eyl 2025

  • CVE-2025-58443
    45Planlayın

    FOG's authentication bypass leads to full SQL DB dump

    KritikCVSS 9,9Kavram kanıtıEPSS %20

    fogproject · fogproject6 Eyl 2025

  • CVE-2025-8085
    40Planlayın

    Ditty < 3.1.58 - Unauthenticated SSRF

    YüksekCVSS 8,6Kavram kanıtıEPSS %20

    metaphorcreations · ditty8 Eyl 2025

  • CVE-2025-10090
    23İzleyin

    Jinher OA GetTreeDate.aspx sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %1

    jinher · jinher oa8 Eyl 2025

  • CVE-2025-55998
    32İzleyin

    A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitra

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    mezereon · smart search and filter8 Eyl 2025

  • CVE-2025-51586
    14İzleyin

    An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive in

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    prestashop · prestashop8 Eyl 2025

  • CVE-2025-56266
    40Planlayın

    A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    avigilon · access control manager8 Eyl 2025

  • CVE-2025-58751
    9İzleyin

    Vite middleware may serve files starting with the same name with the public directory

    DüşükCVSS 2,3Kavram kanıtıEPSS %1

    vitejs · vite8 Eyl 2025

  • CVE-2025-8889
    15İzleyin

    Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload

    DüşükCVSS 3,8Kavram kanıtıEPSS %0

    eliehanna · compress \& upload9 Eyl 2025

  • CVE-2025-42944
    41Planlayın

    Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4)

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    sap_se · sap netweaver (rmi-p4)9 Eyl 2025

  • CVE-2025-53609
    22İzleyin

    A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7

    OrtaCVSS 4,9İstismar yokEPSS %10

    fortinet · fortiweb9 Eyl 2025

  • CVE-2025-54236
    94Hemen

    Adobe Commerce | Improper Input Validation (CWE-20)

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %94

    adobe · commerce9 Eyl 2025

  • CVE-2025-9712
    42Planlayın

    Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to

    YüksekCVSS 8,8İstismar yokEPSS %23

    ivanti · endpoint manager9 Eyl 2025

  • CVE-2025-9872
    40Planlayın

    Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to

    YüksekCVSS 8,8İstismar yokEPSS %15

    ivanti · endpoint manager9 Eyl 2025

  • CVE-2025-47437
    25İzleyin

    WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability

    OrtaCVSS 6,4İstismar yokEPSS %0

    litespeed technologies · litespeed cache9 Eyl 2025

  • CVE-2025-54110
    36İzleyin

    Windows Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    microsoft · windows 10 15079 Eyl 2025

  • CVE-2025-54251
    18İzleyin

    Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    adobe · experience manager9 Eyl 2025

  • CVE-2025-54918
    43Planlayın

    Windows NTLM Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    microsoft · windows 10 15079 Eyl 2025

  • CVE-2025-55234
    45Planlayın

    Windows SMB Elevation of Privilege Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    microsoft · windows 10 15079 Eyl 2025

  • CVE-2025-9951
    28İzleyin

    Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    ffmpeg · ffmpeg9 Eyl 2025

  • CVE-2025-52915
    28İzleyin

    K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCTL requests to termin

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    9 Eyl 2025

  • CVE-2025-34174
    24İzleyin

    Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

    OrtaCVSS 5,1İstismar yokEPSS %14

    pfsense · pfsense9 Eyl 2025

  • CVE-2025-34175
    26İzleyin

    Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

    OrtaCVSS 5,1İstismar yokEPSS %21

    pfsense · pfsense9 Eyl 2025

  • CVE-2025-34176
    26İzleyin

    Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure

    OrtaCVSS 5,3İstismar yokEPSS %17

    pfsense · pfsense9 Eyl 2025

  • CVE-2025-54249
    27İzleyin

    Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    adobe · experience manager9 Eyl 2025

  • CVE-2025-54261
    48Planlayın

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    KritikCVSS 10,0İstismar yokEPSS %25

    adobe · coldfusion9 Eyl 2025

  • CVE-2025-54897
    42Planlayın

    Microsoft SharePoint Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %21

    microsoft · sharepoint server9 Eyl 2025

  • CVE-2025-58180
    37İzleyin

    OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    octoprint · octoprint9 Eyl 2025

  • CVE-2025-10142
    19İzleyin

    PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    martins56 · pagbank / pagseguro connect para woocommerce10 Eyl 2025

  • CVE-2025-57520
    24İzleyin

    A Cross Site Scripting (XSS) vulnerability exists in Decap CMS thru 3.8.3.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    techhub.p-m · decap cms10 Eyl 2025

  • CVE-2025-57642
    28İzleyin

    A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the se

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    sohamjuhin · tourism management system10 Eyl 2025

  • CVE-2025-57392
    31İzleyin

    BenimPOS Masaustu 3.0.x is affected by insecure file permissions.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    benimpos · benimpos10 Eyl 2025

  • CVE-2025-10200
    35İzleyin

    Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap co

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome10 Eyl 2025

  • CVE-2025-10210
    8İzleyin

    yanyutao0402 ChanCMS Api.js search sql injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %1

    chancms · chancms10 Eyl 2025

  • CVE-2025-54123
    42Planlayın

    Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    hoverfly · hoverfly10 Eyl 2025

  • CVE-2025-59049
    31İzleyin

    Mockoon has a Path Traversal and LFI in the static file serving endpoint

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    mockoon · mockoon10 Eyl 2025

  • CVE-2025-10211
    8İzleyin

    yanyutao0402 ChanCMS getArticle CollectController server-side request forgery

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    chancms · chancms10 Eyl 2025

  • CVE-2025-8422
    30İzleyin

    Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    fassionstorage · propovoice: all-in-one client management system11 Eyl 2025

  • CVE-2025-9776
    26İzleyin

    CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    catfolders · catfolders – wordpress media library folders & categories11 Eyl 2025

  • CVE-2025-58320
    34İzleyin

    DIALink - Directory Traversal Authentication Bypass Vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %15

    deltaww · dialink11 Eyl 2025

  • CVE-2025-8570
    39İzleyin

    BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    beyondcart · beyondcart connector11 Eyl 2025

  • CVE-2025-58060
    32İzleyin

    cups has Authentication bypass with AuthType Negotiate

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    openprinting · cups11 Eyl 2025

  • CVE-2025-8061
    29İzleyin

    A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Leno

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    lenovo · dispatcher 3.0 driver11 Eyl 2025

  • CVE-2025-55319
    39İzleyin

    Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    microsoft · visual studio code11 Eyl 2025

  • CVE-2025-21042
    79Bu hafta

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %34

    samsung · android12 Eyl 2025

  • CVE-2025-21043
    70Bu hafta

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2

    samsung · android12 Eyl 2025

  • CVE-2025-59139
    21İzleyin

    Hono has Body Limit Middleware Bypass

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    hono · hono12 Eyl 2025

  • CVE-2025-55996
    25İzleyin

    Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    rakuten · viber12 Eyl 2025

  • CVE-2025-10327
    11İzleyin

    MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %10

    sourcefabric · rpi-jukebox-rfid12 Eyl 2025

  • CVE-2025-58434
    54Planlayın

    Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    flowiseai · flowise12 Eyl 2025

  • CVE-2025-10370
    8İzleyin

    MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    sourcefabric · rpi-jukebox-rfid13 Eyl 2025

  • CVE-2025-10204
    28İzleyin

    Unauth Admin Reset Password on AC Smart II

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    lg electronics · ac smart ii14 Eyl 2025

  • CVE-2025-59359
    40Planlayın

    OS command injection in Chaos Mesh via the cleanTcs mutation

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    chaos-mesh · chaos mesh15 Eyl 2025