Statistiche CVE: settembre 2025

🌐 Scopri le cifre chiave delle vulnerabilità pubblicate a settembre 2025 su CVE Find.

🔎 Panoramica

• Numero totale di CVE pubblicate : 4,535 (+21.3% rispetto al mese precedente)
• Vulnerabilità aggiunte al catalogo CISA KEV : 16

📂 Distribuzione per categorie principali

• Cross-site Scripting : 682
• Authorization problems : 382
• SQL Injection : 356
• Memory Corruption : 302
• Overflow : 288
• Cross-Site Request Forgery - CSRF : 160

📈 Distribuzione per punteggio CVSS

• Low : 124
• Medium : 2518
• High : 1356
• Critical : 321

🏢 Fornitori più colpiti

1. linux : 773
2. google : 180
3. microsoft : 145
4. debian : 139
5. apple : 110

📦 Prodotti più colpiti

1. linux linux_kernel : 773
2. google android : 169
3. debian debian_linux : 139
4. apple macos : 102
5. microsoft windows_server_2025 : 59

⚠️ CVE rilevanti del mese

• CVE-2025-34217 (10 CRITICAL) : Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in ...
• CVE-2025-8120 (10 CRITICAL) : Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type and extension wit...
• CVE-2025-7065 (10 CRITICAL) : Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remote attacker to upload files of any type and extension wit...
• CVE-2025-7063 (10 CRITICAL) : Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension with...
• CVE-2025-34224 (10 CRITICAL) : Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scrip...

Esplora tutti i dati in dettaglio su CVE Find.