CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- portabilis i-educarPortabilis i-Educar cancelar-enturmacao-em-lote access control5.3 Medium
- portabilis i-educarPortabilis i-Educar enturmacao-em-lote access control5.3 Medium
- ash-project ashBefore action hooks may execute in certain scenarios despite a request being forbidden7.1 High
- debian linux, linux kernel +1 moreRevert "fs/ntfs3: Replace inode_trylock with inode_lock"5.5 Medium
- linux, linux kernel +1 moreteam: replace team lock with rtnl lock5.5 Medium
- linux, linux kernel +1 morewifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()7.8 High
- debian linux, linux kernel +1 moref2fs: vm_unmap_ram() may be called from an invalid context5.5 Medium
- debian linux, linux kernel +1 moreNFS: Fix filehandle bounds checking in nfs_fh_to_dentry()7.8 High
- linux, linux kernel +1 morecrypto: ccp - Fix dereferencing uninitialized error pointer5.5 Medium
- linux, linux kernel +1 moremm: swap: fix potential buffer overflow in setup_clusters()7.8 High
custom_derivecrates.iocustom_derive crate is unmaintainedNo score- emiloi online discussion forumitsourcecode Online Discussion Forum add_views.php sql injection6.9 Medium
- facebook-kimmymatillano point of sale system, itsourcecode pos point of sale system +1 moreitsourcecode POS Point of Sale System empty_table.php cross site scripting5.3 Medium
- facebook-kimmymatillano point of sale system, itsourcecode pos point of sale system +1 moreitsourcecode POS Point of Sale System dymanic_table.php cross site scripting5.3 Medium
- ibm mqIBM MQ information disclosure5.1 Medium
- facebook-kimmymatillano point of sale system, itsourcecode pos point of sale system +1 moreitsourcecode POS Point of Sale System dom_data_th.php cross site scripting5.3 Medium
- facebook-kimmymatillano point of sale system, itsourcecode pos point of sale system +1 moreitsourcecode POS Point of Sale System dom_data_two_headers.php cross site scripting5.3 Medium
- shibboleth service providerUnauthenticated SQL Injection Vulnerability in Shibboleth Service Provider9.1 Critical
- facebook-kimmymatillano point of sale system, itsourcecode pos point of sale system +1 moreitsourcecode POS Point of Sale System deferred_table.php cross site scripting5.3 Medium
- itsourcecode student information management systemitsourcecode Student Information Management System login.php sql injection6.9 Medium
- fogprojectFOG's authentication bypass leads to full SQL DB dump9.9 Critical
- amd instinct™ mi300x, instinct™ mi325x +1 moreInsufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...4.7 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9000 series processors, ryzen™ 9000 series desktop processors +4 more +6 moreImproper cleanup in AMD CPU microcode patch loading could allow an attacker with local...7.2 High
- amd radeon™ pro v520 graphics products, radeon™ pro v620 graphics products, radeon™ pro v710 graphics products +16 more +18 moreImproper removal of sensitive information before storage or transfer in AMD Crash Defender could...3.3 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi200 +32 more +34 moreAn out of bounds write in the Linux graphics driver could allow an attacker to overflow the...6.1 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520 graphics products +25 more +27 moreA NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output...5.5 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +33 more +35 moreImproper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker...7.5 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 graphics products, radeon™ pro v520 graphics products +25 more +27 moreImproper input validation in the AMD Graphics Driver could allow an attacker to supply a...8.4 High
- amd instinct™ mi300a, instinct™ mi300x +1 moreImproper input validation in AMD Power Management Firmware (PMFW) could allow a privileged...6.0 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +37 more +39 moreImproper input validation in the GPU driver could allow an attacker to exploit a heap overflow...8.8 High
- amd epyc™ 9004 series processors, epyc™ embedded 9004 series processors, epyc™ embedded 9004 series processors +2 moreImproper initialization of CPU cache memory could allow a privileged attacker with hypervisor...3.2 Low
- amd ryzen™ 7040 series mobile processors with radeon™ graphics, ryzen™ ai 300 series processors +1 moreMissing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections...8.4 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +22 more +24 moreImproper validation of an array index in the AND power Management Firmware could allow a...4.4 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper input validation in the system management mode (SMM) could allow a privileged attacker...7.5 High
- amd radeon™ pro v710 graphics products, radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +2 moreAn integer overflow in the SMU could allow a privileged attacker to potentially write memory...3.9 Low
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +2 more +4 moreImproper restriction of operations in the IOMMU could allow a malicious hypervisor to access...5.3 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors, ryzen™ 4000 series desktop processors +17 more +19 moreAn out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious...2.5 Low
- amd instinct™ mi210, instinct™ mi250, radeon™ pro v710 graphics products +12 more +14 moreUse of an uninitialized variable in the ASP could allow an attacker to access leftover data from...2.8 Low
- amd radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products, ryzen™ 7040 series mobile processors with radeon™ graphics +1 more +3 moreImproper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to...7.2 High
- amd -amd radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +1 moreType confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability...8.7 High
- amd radeon™ pro v520 graphics products, radeon™ pro v620 graphics products, radeon™ pro w5000 series graphics products +3 more +5 moreImproper validation of an array index in the AMD graphics driver software could allow an attacker...3.3 Low
- amd instinct™ mi210, instinct™ mi250, radeon™ instinct™ mi25 graphics products +2 more +4 moreImproper handling of insufficiency privileges in the ASP could allow a privileged attacker to...3.3 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v620 graphics products, radeon™ pro w6000 series graphics products +13 more +15 moreFailure to validate the address and size in TEE (Trusted Execution Environment) may allow a...3.0 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 graphics products, radeon™ pro v520 graphics products +22 more +24 moreInsufficient parameter validation while allocating process space in the Trusted OS (TOS) may...4.1 Medium
- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow8.7 High
- emiloimagtolis online discussion forumitsourcecode Online Discussion Forum admin sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System index.php cross site scripting5.3 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 moreUpdate of kernelNo score- Show moreLoading…