İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2025: sömürülen ve yeni ciddi CVE kayıtları

197 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2025-10440
    12İzleyin

    D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

    DüşükCVSS 2,1İstismar yokEPSS %12

    d-link · di-810015 Eyl 2025

  • CVE-2025-46408
    39İzleyin

    An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpC

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    avtech · eagleeyes\(lite\)15 Eyl 2025

  • CVE-2025-50110
    35İzleyin

    An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse m

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    15 Eyl 2025

  • CVE-2025-50944
    35İzleyin

    An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    avtech · eagleeyes\(lite\)15 Eyl 2025

  • CVE-2025-10441
    12İzleyin

    D-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injection

    DüşükCVSS 2,1İstismar yokEPSS %12

    d-link · di-8100g15 Eyl 2025

  • CVE-2025-6202
    28İzleyin

    Phoenix: Rowhammer attack on Hynix DDR5 devices

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    sk hynix · ddr515 Eyl 2025

  • CVE-2025-57174
    40Planlayın

    An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previo

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    15 Eyl 2025

  • CVE-2025-57176
    26İzleyin

    On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP po

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    ceragon networks / siklu communication · etherhaul and multihaul series microwave antennas15 Eyl 2025

  • CVE-2025-59376
    21İzleyin

    feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-dele

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    feisky · mcp-kubernetes-server15 Eyl 2025

  • CVE-2025-9808
    21İzleyin

    The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    stellarwp · the events calendar16 Eyl 2025

  • CVE-2025-2404
    17İzleyin

    XSS in Ubit Information Technologies' STOYS

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    ubit information technologies · stoys16 Eyl 2025

  • CVE-2025-4688
    39İzleyin

    SQLi in BGS Interactive's SINAV.LINK Exam Result Module

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    bgs interactive · sinav.link exam result module16 Eyl 2025

  • CVE-2025-41249
    30İzleyin

    CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    vmware · spring framework16 Eyl 2025

  • CVE-2009-20005
    60Bu hafta

    InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    intersystems corporation · intersystems caché16 Eyl 2025

  • CVE-2009-20006
    60Bu hafta

    osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    oscommerce · oscommerce16 Eyl 2025

  • CVE-2009-20007
    60Bu hafta

    Talkative IRC v0.4.4.16 Response Buffer Overflow

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    talkative · talkative irc16 Eyl 2025

  • CVE-2025-41243
    41Planlayın

    Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux

    KritikCVSS 10,0Kavram kanıtıEPSS %3

    spring · cloud gateway16 Eyl 2025

  • CVE-2025-9215
    26İzleyin

    StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Down

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    kodezen · storeengine — complete ecommerce solution with memberships, licensing, affiliates & more17 Eyl 2025

  • CVE-2025-9216
    35İzleyin

    StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Uplo

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    kodezen · storeengine — complete ecommerce solution with memberships, licensing, affiliates & more17 Eyl 2025

  • CVE-2025-9242
    95Hemen

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %91

    watchguard · fireware17 Eyl 2025

  • CVE-2025-59456
    26İzleyin

    In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload

    OrtaCVSS 5,5İstismar yokEPSS %13

    jetbrains · teamcity17 Eyl 2025

  • CVE-2025-10042
    30İzleyin

    Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    ays-pro · quiz maker17 Eyl 2025

  • CVE-2025-59474
    22İzleyin

    Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible t

    OrtaCVSS 5,3Kavram kanıtıEPSS %4

    jenkins · jenkins17 Eyl 2025

  • CVE-2025-57055
    26İzleyin

    WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    wondercms · wondercms17 Eyl 2025

  • CVE-2025-59341
    30İzleyin

    Local File Inclusion in esm.sh

    YüksekCVSS 7,7Kavram kanıtıEPSS %1

    esm-dev · esm.sh17 Eyl 2025

  • CVE-2025-59342
    23İzleyin

    esm.sh writes arbitrary files via path traversal in `X-Zone-Id` header

    OrtaCVSS 5,5Kavram kanıtıEPSS %3

    esm-dev · esm.sh17 Eyl 2025

  • CVE-2025-10493
    21İzleyin

    Chained Quiz <= 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    prasunsen · chained quiz18 Eyl 2025

  • CVE-2025-40677
    34İzleyin

    SQL injection vulnerability in Summar Software´s Portal del Empleado

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    summar software · portal del empleado18 Eyl 2025

  • CVE-2025-10666
    30İzleyin

    D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow

    YüksekCVSS 7,4Kavram kanıtıEPSS %3

    dlink · dir-825 firmware18 Eyl 2025

  • CVE-2025-55911
    26İzleyin

    An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    oxygenz · clipbucket18 Eyl 2025

  • CVE-2023-49367
    35İzleyin

    An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent pa

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    18 Eyl 2025

  • CVE-2025-55912
    29İzleyin

    An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php t

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    oxygenz · clipbucket18 Eyl 2025

  • CVE-2025-59424
    29İzleyin

    LinkAce Vulnerable to Stored XSS on the Audit Page

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    linkace · linkace18 Eyl 2025

  • CVE-2025-10035
    99Hemen

    Deserialization Vulnerability in GoAnywhere MFT's License Servlet

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    fortra · goanywhere managed file transfer18 Eyl 2025

  • CVE-2025-59712
    21İzleyin

    Snipe-IT before 8.1.18 allows XSS.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    snipeitapp · snipe-it18 Eyl 2025

  • CVE-2025-48703
    96Hemen

    CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in t

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %99

    control-webpanel · webpanel19 Eyl 2025

  • CVE-2025-56762
    24İzleyin

    Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    paracrawl · keops19 Eyl 2025

  • CVE-2025-59689
    60Bu hafta

    Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment.

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %1

    libraesva · email security gateway19 Eyl 2025

  • CVE-2025-39866
    31İzleyin

    fs: writeback: fix use-after-free in __mark_inode_dirty()

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel19 Eyl 2025

  • CVE-2025-10658
    26İzleyin

    SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    psmplugins · supportcandy – helpdesk & customer support ticket system20 Eyl 2025

  • CVE-2025-10771
    8İzleyin

    jeecgboot JimuReport DB2 JDBC testConnection deserialization

    DüşükCVSS 2,1İstismar yokEPSS %0

    jeecg · jimureport21 Eyl 2025

  • CVE-2025-10775
    14İzleyin

    Wavlink WL-NU516U1 login.cgi sub_4012A0 os command injection

    DüşükCVSS 2,0İstismar yokEPSS %20

    wavlink · wl-nu516u1 firmware21 Eyl 2025

  • CVE-2025-9983
    28İzleyin

    Lack of Authentication for RTSP stream

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    galayou · g222 Eyl 2025

  • CVE-2025-55885
    25İzleyin

    SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate pri

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    ard · gec en ligne22 Eyl 2025

  • CVE-2025-55886
    26İzleyin

    An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    22 Eyl 2025

  • CVE-2025-55888
    29İzleyin

    Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD.

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    ard · gec en ligne22 Eyl 2025

  • CVE-2025-52367
    40Planlayın

    Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field.

    OrtaCVSS 5,4SilahlaştırılmışEPSS %4

    pivotx · pivotx22 Eyl 2025

  • CVE-2025-55887
    24İzleyin

    Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    ard · gec en ligne22 Eyl 2025

  • CVE-2025-57926
    26İzleyin

    WordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    wp chill · passster22 Eyl 2025

  • CVE-2025-58226
    21İzleyin

    WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.16.16 - Sensitive Data Exposure Vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    iberezansky · 3d flipbook – pdf flipbook viewer, flipbook image gallery22 Eyl 2025

  • CVE-2025-59582
    21İzleyin

    WordPress Ajax Load More Plugin <= 7.6.0.2 - Sensitive Data Exposure Vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    darren cooney · ajax load more22 Eyl 2025

  • CVE-2025-59528
    66Bu hafta

    Flowise has Remote Code Execution vulnerability

    KritikCVSS 10,0SilahlaştırılmışEPSS %86

    flowiseai · flowise22 Eyl 2025

  • CVE-2025-59532
    34İzleyin

    Codex has sandbox bypass due to bug in path configuration logic

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    openai · codex22 Eyl 2025

  • CVE-2025-26399
    96Hemen

    SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    solarwinds · web help desk23 Eyl 2025

  • CVE-2025-10147
    39İzleyin

    Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    eteubert · podlove podcast publisher23 Eyl 2025

  • CVE-2025-10184
    33İzleyin

    OnePlus OxygenOS Telephony provider permission bypass

    YüksekCVSS 8,2Kavram kanıtıEPSS %4

    oneplus · oxygenos23 Eyl 2025

  • CVE-2025-55780
    30İzleyin

    A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    artifex · mupdf23 Eyl 2025

  • CVE-2025-56311
    26İzleyin

    In Shenzhen C-Data Technology Co.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    23 Eyl 2025

  • CVE-2025-23339
    31İzleyin

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by get

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    nvidia · cuda toolkit24 Eyl 2025

  • CVE-2025-48868
    29İzleyin

    Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    horilla · horilla24 Eyl 2025

  • CVE-2025-56819
    40Planlayın

    An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    running-elephant · datart24 Eyl 2025

  • CVE-2025-10585
    71Bu hafta

    Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %5

    google · chrome24 Eyl 2025

  • CVE-2025-56815
    28İzleyin

    Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transf

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    running-elephant · datart24 Eyl 2025

  • CVE-2025-20352
    72Bu hafta

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the f

    YüksekCVSS 7,7KEVSilahlaştırılmışEPSS %41

    cisco · ios xe sd-wan24 Eyl 2025

  • CVE-2025-52906
    41Planlayın

    TOTOLINK X6000R Command Injection Vulnerability

    KritikCVSS 9,3İstismar yokEPSS %13

    totolink · x6000r firmware24 Eyl 2025

  • CVE-2025-57328
    30İzleyin

    toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other obj

    YüksekCVSS 7,5İstismar yokEPSS %0

    jonschlinkert · toggle-array24 Eyl 2025

  • CVE-2025-10894
    38İzleyin

    Nx: nx/devkit: malicious versions of nx and plugins published to npm

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    red hat · multicluster global hub24 Eyl 2025

  • CVE-2025-10951
    22İzleyin

    geyang ml-logger server.py log_handler path traversal

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    geyang · ml-logger25 Eyl 2025

  • CVE-2025-10952
    22İzleyin

    geyang ml-logger File server.py stream_handler information disclosure

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    geyang · ml-logger25 Eyl 2025

  • CVE-2025-20333
    90Hemen

    A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %71

    cisco · adaptive security appliance software25 Eyl 2025

  • CVE-2025-20362
    90Hemen

    Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %87

    cisco · adaptive security appliance software25 Eyl 2025

  • CVE-2025-34227
    42Planlayın

    Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

    YüksekCVSS 8,6Kavram kanıtıEPSS %25

    nagios · nagios xi25 Eyl 2025

  • CVE-2025-10377
    17İzleyin

    System Dashboard <= 2.8.20 - Cross-Site Request Forgery

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    qriouslad · system dashboard26 Eyl 2025

  • CVE-2025-9985
    25İzleyin

    Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

    OrtaCVSS 5,3Kavram kanıtıEPSS %12

    marceljm · featured image from url (fifu)26 Eyl 2025

  • CVE-2025-10307
    26İzleyin

    Backuply – Backup, Restore, Migrate and Clone <= 1.4.8 - Authenticated (Admin+) Arbitrary File Deletion

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    softaculous · backuply – backup, restore, migrate and clone26 Eyl 2025

  • CVE-2025-55848
    35İzleyin

    An issue was discovered in DIR-823 firmware 20250416.

    YüksekCVSS 8,8İstismar yokEPSS %0

    dlink · dir-823x firmware26 Eyl 2025

  • CVE-2025-9267
    28İzleyin

    In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    seagate · toolkit26 Eyl 2025

  • CVE-2025-56383
    33İzleyin

    Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code.

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    26 Eyl 2025

  • CVE-2025-59843
    27İzleyin

    FlagForgeCTF Exposes User Emails via Public /api/user/[username] API

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    flagforge · flagforge26 Eyl 2025

  • CVE-2025-59934
    40Planlayın

    Formbricks missing JWT signature verification

    KritikCVSS 9,4Kavram kanıtıEPSS %9

    formbricks · formbricks26 Eyl 2025

  • CVE-2025-9816
    31İzleyin

    WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

    YüksekCVSS 7,2Kavram kanıtıEPSS %10

    veronalabs · wp statistics – simple, privacy-friendly google analytics alternative27 Eyl 2025

  • CVE-2025-11077
    22İzleyin

    Campcodes Online Learning Management System add_content.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    campcodes · online learning management system27 Eyl 2025

  • CVE-2025-57428
    26İzleyin

    Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    29 Eyl 2025

  • CVE-2025-8868
    43Planlayın

    Chef Automate compliance service SQL Injection Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    chef · automate29 Eyl 2025

  • CVE-2025-51495
    30İzleyin

    An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    cesanta · mongoose29 Eyl 2025

  • CVE-2025-56795
    36İzleyin

    Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality.

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    mealie · mealie29 Eyl 2025

  • CVE-2025-56807
    24İzleyin

    A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaSc

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    fairsketch · rise ultimate project manager29 Eyl 2025

  • CVE-2025-57483
    32İzleyin

    A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the co

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    29 Eyl 2025

  • CVE-2025-56764
    21İzleyin

    Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning different error mess

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    trivisionsecurity · trivision nc-227wf firmware29 Eyl 2025

  • CVE-2025-41244
    64Bu hafta

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %8

    vmware · aria operations29 Eyl 2025

  • CVE-2025-43400
    27İzleyin

    An out-of-bounds write issue was addressed with improved bounds checking.

    OrtaCVSS 6,3Kavram kanıtıEPSS %6

    apple · ipados29 Eyl 2025

  • CVE-2025-61584
    37İzleyin

    serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    serverless-dns · serverless-dns30 Eyl 2025

  • CVE-2025-8625
    39İzleyin

    Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    copypressdev · copypress rest api30 Eyl 2025

  • CVE-2025-56520
    21İzleyin

    Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUplo

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    dify · dify30 Eyl 2025

  • CVE-2025-10725
    39İzleyin

    Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    opendatahub-io · opendatahub-operator30 Eyl 2025

  • CVE-2025-56513
    39İzleyin

    NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    nicehash · quickminer30 Eyl 2025

  • CVE-2025-56132
    29İzleyin

    LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality.

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    liquidfiles · liquidfiles30 Eyl 2025