CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- newbee-ltd newbee-mallnewbee-mall kaptcha mallKaptcha Captcha6.3 Medium
- gotac statistical database systemGotac｜Statistical Database System - Missing Authentication9.3 Critical
- newbee-ltd newbee-mallnewbee-mall Order Status paySuccess improper authorization5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System update_account.php sql injection5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System form137.php sql injection5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System del_promote.php sql injection5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System view_students.php sql injection5.3 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- everest libocpplibocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is...3.1 Low
- everest libocppThe OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via...3.1 Low
- openwebanalytics open web analyticsOpen Web Analytics Server is vulnerable to SQL Injection5.0 Medium
- gnu guixIn guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to...5.7 Medium
- feisky mcp-kubernetes-servermcp-kubernetes-server has an OS Command Injection vulnerability3.7 Low
- feisky mcp-kubernetes-servermcp-kubernetes-server has a Command Injection vulnerability3.7 Low
- libexpat project libexpat, siemens ruggedcom rst2428p (6gk6242-6pa00), scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +19 more +21 morelibexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a...7.5 High
- sumatrapdfreader sumatrapdfA null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing...7.3 High
- ceragon networks / siklu communication etherhaul and multihaul series microwave antennasThe rfpiped service on TCP port 555 in Ceragon Networks / Siklu Communication EtherHaul series ...6.5 Medium
- No product listedAn issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4...9.8 Critical
- phpgurukul online library management systemAn issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate...9.8 Critical
- remyandrade employee management systemA Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows...5.4 Medium
- zeon teampelTeampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx.5.4 Medium
- phpgurukul student result management systemA Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the...7.3 High
- positron px360bt firmwareThe Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure...6.8 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access...8.1 High
- pathinfotech servitiumcrmCross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execute...6.1 Medium
- explorance blueMultiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2...6.1 Medium
- totolink x6000r firmwareTOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in...9.8 Critical
- avtech eagleeyes\(lite\)An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew...8.8 High
- No product listedAn issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH...8.8 High
- harry0703 moneyprinterturbowangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api...6.3 Medium
- avtech eagleeyes\(lite\)An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push...9.8 Critical
seafileUbuntuSeafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site...5.4 Medium- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- emiloi e-logbook with health monitoring system for covid-19itsourcecode E-Logbook with Health Monitoring System for COVID-19 POST Request check_profile.php cross site scripting5.3 Medium
- rems link status checkerSourceCodester Link Status Checker index.php server-side request forgery5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System rms.php sql injection5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System edit_user.php sql injection5.3 Medium
- codeastro student grading systemSourceCodester Student Grading System view_user.php sql injection5.3 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System listbaptism.php sql injection6.9 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System rptbaptismal.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System view-enquiry.php sql injection6.9 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System readenq.php sql injection6.9 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823x diag_ping command injection5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System ticket-message.php sql injection5.3 Medium
- korzh easyqueryKorzh EasyQuery Query Builder UI fetch sql injection5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure2.3 Low
- Show moreLoading…