CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform's configuration files can be accessed through the webjars API9.3 Critical
- cisco webex meetingsA vulnerability in the user profile component of Cisco Webex Meetings could have allowed an...5.4 Medium
- cisco webex meetingsA vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to...4.3 Medium
- cisco session initiation protocol (sip) software, desk phone 9841 firmware, desk phone 9851 firmware +15 more +17 moreCisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability5.3 Medium
- cisco session initiation protocol (sip) software, desk phone 9841 firmware, desk phone 9851 firmware +15 more +17 moreCisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability5.3 Medium
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability6.1 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreCisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco unified communications managerCisco Unified Communications Manager Cross-Site Request Forgery Vulnerability4.3 Medium
- cisco evolved programmable network manager (epnm), evolved programmable network manager +1 moreCisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability4.3 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreCisco Evolved Programmable Network Manager Information Disclosure Vulnerability4.3 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System index.php cross site scripting5.3 Medium
- code-projects pos pharmacy systemcode-projects POS Pharmacy System products.php cross site scripting4.8 Medium
- No product listedSandbox escape in smolagents Local Python execution environment via dunder attributes7.6 High
- google chromechromium - security update5.4 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a...8.8 High
- google chromechromium - security update5.4 Medium
- acquia dam, drupal acquia dam +1 moreAcquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-1057.5 High
- campcodes recruitment management system, online recruitment management system +1 moreCampcodes Recruitment Management System index.php include file inclusion5.1 Medium
- 1000projects beauty parlour management system1000projects Beauty Parlour Management System bwdates-reports-details.php sql injection6.9 Medium
mungeopenSUSESecurity update for mungeNo score- hcl software compassHCL Compass is affected by a security vulnerability7.5 High
- jenkins opentelemetry, jenkins project opentelemetry plugin +1 moreJenkins OpenTelemetry Plugin missing permission check allows capturing credentials4.2 Medium
- jenkins project global-build-stats plugin, jenkins global build stats +1 moreJenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated4.3 Medium
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client Plugin file system information disclosure vulnerability4.3 Medium
- enituretechnology ltl freight quotes - tql editionWordPress LTL Freight Quotes - TQL Edition Plugin <= 1.2.6 - PHP Object Injection Vulnerability7.2 High
- enituretechnology ltl freight quotes – daylight editionWordPress LTL Freight Quotes – Daylight Edition Plugin <= 2.2.7 - PHP Object Injection Vulnerability7.2 High
- enituretechnology ltl freight quotes – day & ross editionWordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability7.2 High
- kamleshyadav exit intent popupWordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability5.4 Medium
- matrixaddons document engineWordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- ali khallad contact form by mega formsWordPress Contact Form By Mega Forms Plugin <= 1.6.1 - Broken Access Control Vulnerability5.4 Medium
- immonex kickstartWordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability7.5 High
- devitems support genixWordPress Support Genix Plugin <= 1.4.23 - Broken Access Control Vulnerability5.3 Medium
- peachpay paymentsWordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability5.3 Medium
- deetronix booking ultra proWordPress Booking Ultra Pro Plugin <= 1.1.21 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- dadevarzan wordpress commonWordPress Dadevarzan WordPress Common Plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- zeen101 issuemWordPress IssueM Plugin <= 2.9.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- rbaer simple matomo tracking codeWordPress Simple Matomo Tracking Code Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- rumbletalk live group chatWordPress RumbleTalk Live Group Chat Plugin <= 6.3.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- spiffy plugins wp flow plusWordPress WP Flow Plus Plugin <= 5.2.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- falselight exchange ratesWordPress Exchange Rates Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- bohemia plugins event feed for eventbriteWordPress Event Feed for Eventbrite Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- yydevelopment mobile contact lineWordPress Mobile Contact Line Plugin <= 2.4.0 - Broken Access Control Vulnerability4.3 Medium
- amuse labs puzzleme for wordpressWordPress PuzzleMe for WordPress Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- add-ons.org pdf for wpformsWordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- jonathan jernigan pie calendarWordPress Pie Calendar Plugin <= 1.2.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- faktor vier f4 media taxonomiesWordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability4.3 Medium
- frisbii payWordPress Frisbii Pay Plugin <= 1.8.2.1 - Broken Access Control Vulnerability6.5 Medium
- gfazioli wp bannerize proWordPress WP Bannerize Pro Plugin <= 1.10.0 - Server Side Request Forgery (SSRF) Vulnerability4.4 Medium
- jamel.z tooltipyWordPress Tooltipy Plugin <= 5.5.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- barn2 plugins posts table with search & sortWordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability5.3 Medium
- Show moreLoading…