CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- linux, linux kernel +1 morebpf: make sure skb->len != 0 when redirecting to a tunneling device5.5 Medium
- linux, linux kernel +1 moreigb: Do not free q_vector unless new one was allocated7.8 High
- campcodes online job finder systemCampcodes Online Job Finder System index.php sql injection6.9 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mvm: fix double free on tx path.7.8 High
- linux, linux kernel +1 morerapidio: fix possible UAF when kfifo_alloc() fails7.8 High
- linux, linux kernel +1 morecxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()5.5 Medium
- linux, linux kernel +1 moredrivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()5.5 Medium
- linux, linux kernel +1 moreandroid: binder: stop saving a pointer to the VMA7.8 High
- linux, linux kernel +1 moreiommu/mediatek: Fix crash on isr after kexec()5.5 Medium
@metamask/sdknpm,@metamask/sdk-communication-layernpm,@metamask/sdk-reactnpm +2 moreMetaMask SDK indirectly exposed via malicious debug@4.4.2 dependencyNo score- campcodes online job finder systemCampcodes Online Job Finder System applicationform.php unrestricted upload6.9 Medium
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System cust_searchfrm.php sql injection6.9 Medium
- linux, linux kernel +1 morelib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts7.5 High
- linux, linux kernel +1 morescsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()7.8 High
- linux, linux kernel +1 morelib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts7.5 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moreusb: dwc3: Remove WARN_ON for device endpoint command timeouts5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 morebtrfs: abort transaction on unexpected eb generation at btrfs_copy_root()7.8 High
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System us_transac.php sql injection6.9 Medium
- gen digital ccleanerCCleaner Link Following Local Privilege Escalation Vulnerability7.3 High
- campcodes online job finder systemCampcodes Online Job Finder System advancesearch.php sql injection6.9 Medium
- chaos-mesh chaos meshOS command injection in Chaos Mesh via the cleanIptables mutation9.8 Critical
- chaos-mesh chaos meshOS command injection in Chaos Mesh via the killProcesses mutation9.8 Critical
- chaos-mesh chaos meshOS command injection in Chaos Mesh via the cleanTcs mutation9.8 Critical
- chaos-mesh chaos meshDenial of Service via Unauthorized Access to Chaos Mesh debugging server7.5 High
- tenda ac15, ac9, ac15 firmware +1 more +3 moreTenda AC9/AC15 exeCommand formexeCommand buffer overflow8.7 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has stored cross-site scripting (XSS) vulnerability4.6 Medium
- tenda ac15, ac9, ac15 firmware +1 more +3 moreTenda AC9/AC15 exeCommand formexeCommand os command injection5.3 Medium
- d-link di-8003g, di-8100g, di-8200g +2 moreD-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injection5.3 Medium
- mattermost, mattermost server +1 moreOne-Click Mattermost Account Takeover via Poisoned RelayState SAML Parameter7.6 High
- mattermost, mattermost server +1 moreOpen redirect in OAuth login3.1 Low
- m-files hubshareStored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows...7.0 High
- mattermost, mattermost server +1 moreWeak cache keys lead to post IDOR and link preview poisoning4.3 Medium
- mattermost, mattermost server +1 moreMattermost Server exposes sensitive user credentials during shared channel membership synchronization6.5 Medium
- d-link di-8003, di-8003g, di-8100 +3 more +5 moreD-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection5.3 Medium
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System sup_searchfrm.php sql injection6.9 Medium
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System cust_edit1.php sql injection6.9 Medium
- No product listedIbuyuCMS Add Article article.php cross site scripting4.8 Medium
microcode_ctlTuxCareUpdate of microcode_ctlNo score- 1panel-dev maxkb1Panel-dev MaxKB debug deserialization5.3 Medium
- wago cc100 0751-9301, cc100 0751-9301 hw rev. <082100, cc100 0751-9301/k000-0005 +45 more +47 moreWAGO: Vulnerability in hardware switch circuit6.5 Medium
- tenda ac1206, ac1206 firmware +1 moreTenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow9.3 Critical
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software ajax_represent.php sql injection5.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software barcode.php sql injection5.3 Medium
- pilotgaea technologies o'view mapserverPilotGaea Technologies｜O'View MapServer - Server-Side Request Forgery6.9 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software ajax_product.php sql injection5.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted upload5.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software user.php unrestricted upload5.3 Medium
- campcodes online laundry management systemitsourcecode Online Laundry Management System login.php sql injection6.9 Medium
- 1000projects online student project report submission and evaluation system1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload6.9 Medium
- 1000projects online student project report submission and evaluation system1000projects Online Student Project Report Submission and Evaluation System faculty_controller.php unrestricted upload6.9 Medium
- Show moreLoading…