CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
pingora-corecrates.ioPingora update for MadeYouReset HTTP/2 vulnerability8.2 High- wondershare repairitWondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability9.4 Critical
- wondershare repairitWondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability9.1 Critical
- campcodes online polling systemSourceCodester Online Polling System positions.php sql injection5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websiteitsourcecode E-Commerce Website users.php unrestricted upload5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce websiteitsourcecode E-Commerce Website products.php unrestricted upload5.3 Medium
- dragonflyoss dragonflyDragonfly tiny file download uses hard coded HTTP protocol5.5 Medium
- dragonflyoss dragonflyDragonfly has weak integrity checks for downloaded files5.5 Medium
- hubspot jinjavajinjava Sandbox Bypass via JavaType-Based Deserialization9.8 Critical
- dragonflyoss dragonflyManager generates mTLS certificates for arbitrary IP addresses7.7 High
- dragonflyoss dragonflyDragonfly allows arbitrary file read and write on a peer machine6.9 Medium
- dragonflyoss dragonflyDragonfly possibly panics due to nil pointer dereference when using variables created alongside an error2.7 Low
- dragonflyoss dragonflyTiming attacks against Proxy’s basic authentication are possible2.7 Low
- dragonflyoss dragonflyDirectories created via os.MkdirAll are not checked for permissions2.0 Low
- emiloi e-logbook with health monitoring system for covid-19itsourcecode E-Logbook with Health Monitoring System for COVID-19 print_reports_prev.php cross site scripting5.3 Medium
- hewlett packard enterprise (hpe) hpe aruba networking clearpass policy managerUnauthenticated Reflected Cross-Site Scripting6.1 Medium
- dragonflyoss dragonflyDragonfly incorrectly handles a task structure’s usedTraffic field5.5 Medium
- dragonflyoss dragonflyDragonfly Manager makes requests to external endpoints with disabled TLS authentication2.7 Low
- dragonflyoss dragonflyDragonfly server-side request forgery vulnerability5.5 Medium
- dragonflyoss dragonflyDragonfly did not enable authentication for some Manager’s endpoints7.7 High
- code-projects student information systemitsourcecode Student Information System leveledit1.php sql injection5.3 Medium
- the-scratch-channel tsc-web-clientThe Scratch Channel forks can publish articles7.2 High
- @clerk nuxtNuxt Client-Side Path Traversal in Nuxt Island Payload Revival3.1 Low
- portabilis i-educarPortabilis i-Educar enrollment-history access control5.3 Medium
- portabilis i-educarPortabilis i-Educar diarioApi information disclosure5.3 Medium
- Show moreLoading…