CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- kovah linkaceLinkAce Vulnerable to Stored XSS on the Audit Page7.3 High
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software paid.php sql injection6.9 Medium
- softiron hypercloudImproper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users1.8 Low
- wind river systems inc vxworks 7Buffer manipulation6.7 Medium
- jkev responsive e-learning systemSourceCodester Responsive E-Learning System add_teacher.php sql injection6.9 Medium
- linux, linux kernel +1 moref2fs: don't reset unchangable mount option in f2fs_remount()4.7 Medium
- linux, linux kernel +1 morePCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free7.8 High
- linux, linux kernel +1 morenet: qrtr: Fix a refcount bug in qrtr_recvmsg()7.8 High
- linux, linux kernel +1 morenilfs2: fix sysfs interface lifetime7.8 High
- linux, linux kernel +1 morenet: skb_partial_csum_set() fix against transport header magic value5.5 Medium
- linux, linux kernel +1 morex86/MCE: Always save CS register on AMD Zen IF Poison errors5.5 Medium
- linux, linux kernel +1 morescsi: snic: Fix possible memory leak if device_add() fails5.5 Medium
- linux, linux kernel +1 morecassini: Fix a memory leak in the error handling path of cas_init_one()5.5 Medium
- linux, linux kernel +1 moreremoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores5.5 Medium
- linux, linux kernel +1 morefirewire: net: fix use after free in fwnet_finish_incoming_packet()8.8 High
- linux, linux kernel +1 morebtrfs: don't check PageError in __extent_writepage7.8 High
- linux, linux kernel +1 morepowercap: arm_scmi: Remove recursion while parsing zones5.5 Medium
- linux, linux kernel +1 morecifs: Fix warning and UAF when destroy the MR list7.8 High
- linux, linux kernel +1 morexsk: Fix xsk_diag use-after-free error during socket cleanup7.8 High
- linux, linux kernel +1 moremedia: platform: mediatek: vpu: fix NULL ptr dereference5.5 Medium
- linux, linux kernel +1 moreclk: mediatek: fix of_iomap memory leak5.5 Medium
- linux, linux kernel +1 moreobjtool: Fix memory leak in create_static_call_sections()5.5 Medium
- linux, linux kernel +1 morentfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()7.1 High
- linux, linux kernel +1 morercu: Protect rcu_print_task_exp_stall() ->exp_tasks access5.5 Medium
- linux, linux kernel +1 moreBluetooth: hci_sysfs: Fix attempting to call device_add multiple times8.8 High
- linux, linux kernel +1 moredrm/panfrost: Fix GEM handle creation ref-counting7.8 High
- linux, linux kernel +1 moreparisc: led: Fix potential null-ptr-deref in start_task()5.5 Medium
- linux, linux kernel +1 morescsi: fcoe: Fix transport not deattached when fcoe_if_init() fails5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: fix use-after-free8.8 High
- linux, linux kernel +1 moreACPICA: Fix error code path in acpi_ds_call_control_method()7.8 High
- linux, linux kernel +1 morenet: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory5.5 Medium
- linux, linux kernel +1 morecrypto: hisilicon/qm - increase the memory of local variables5.5 Medium
- linux, linux kernel +1 morefbdev: fbcon: release buffer when fbcon_do_set_font() failed5.5 Medium
- linux, linux kernel +1 morenfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure9.8 Critical
- fuyang lipengjun platformfuyang_lipengjun platform queryAll BrandController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll AttributeController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll AttributeCategoryController improper authorization5.3 Medium
- ibm watsonx.dataIBM watsonx.data information disclosure4.3 Medium
- ibm watsonx.dataIBM watsonx.data command execution4.7 Medium
- ibm watsonx.dataIBM watsonx.data cross-site scripting5.5 Medium
- itsourcecode student information management systemitsourcecode Student Information Management System index.php sql injection6.9 Medium
- frappe pressPress vulnerable to email flooding to users due to lack of validation and rate limits2.7 Low
- lobehub lobe-chat, lobe chat +1 moreLobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages6.8 Medium
- whuan132 aibatterywhuan132 AIBattery com.collweb.AIBatteryHelper BatteryXPCService.swift missing authentication8.5 High
- youth-is-as-pale-as-poetry e-learningyouth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values6.3 Medium
- enalean tuleapTuleap backlog item representations do not verify the permissions of the child trackers4.3 Medium
- emiloi e-logbook with health monitoring system for covid-19itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injection6.9 Medium
- linux, linux kernel +1 moreUSB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()5.5 Medium
- linux, linux kernel +1 moreUSB: sl811: fix memory leak with using debugfs_lookup()5.5 Medium
- torproject torTor Onion Service Descriptor resource consumption6.3 Medium
- Show moreLoading…