CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- tuyaAn issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control...9.1 Critical
- carmelo computer laboratory systemcode-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload...7.3 High
- fabian human resource integrated systemcode-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting (XSS) in...5.4 Medium
- fabian document management systemcode-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability,...5.4 Medium
- carmelo food ordering review systemcode-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the...5.4 Medium
- carmelo food ordering review systemcode-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the...5.4 Medium
- zhyd oneblogThe /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.7.5 High
- by-night smsby-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg...8.8 High
- huayi-tec jeewmsA Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to...6.1 Medium
- No product listedA vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS)...9.1 Critical
- frappe erpnextIn Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnext/stock/utils.py is...7.5 High
- aaluoxiang oa systemSQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute...8.0 High
- alludo mindmanagerIn Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as...2.2 Low
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 1438.8 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: Cache component6.2 Medium
- mozilla firefox, thunderbird +1 moreInteger overflow in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: GC component6.5 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Layout component6.5 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics: Canvas2D component7.1 High
- ffmpegFfmpeg: null pointer dereference in firequalizer filter (libavfilter/af_firequalizer.c)5.3 Medium
- apple macosA file quarantine bypass was addressed with additional checks. This issue is fixed in macOS...5.2 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...2.8 Low
- apple macosThis issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia...5.3 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...3.3 Low
- apple macos, tvos, watchos +1 more +3 moreAn issue existed in the handling of environment variables. This issue was addressed with improved...3.3 Low
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe...5.5 Medium
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7,...5.5 Medium
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...7.0 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7,...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...3.3 Low
- apple ipados, macos, visionos +3 more +5 moreA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...4.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA denial-of-service issue was addressed with improved validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26...8.8 High
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...3.3 Low
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreA denial-of-service issue was addressed with improved validation. This issue is fixed in macOS...5.5 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS...7.8 High
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...5.5 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple ipados, macos, safari +7 more +9 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 26, Safari 26,...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...5.5 Medium
- apple xcodeThe issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...7.5 High
- apple macosThis issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe...6.2 Medium
- Show moreLoading…