CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- debian linux, linux kernel +1 moremm/damon/sysfs: fix use-after-free in state_show()7.8 High
- debian linux, linux kernel +1 morenet: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()5.5 Medium
- linux, linux kernel +1 moreigb: Fix NULL pointer dereference in ethtool loopback test5.5 Medium
- linux, linux kernel +1 moremacsec: sync features on RTM_NEWLINK5.5 Medium
- debian linux, linux kernel +1 morecan: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB7.8 High
- linux, linux kernel +1 morehsr: hold rcu and dev lock for hsr_get_port_ndev7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: idxd: Remove improper idxd_free7.8 High
- debian linux, linux kernel +1 moredmaengine: idxd: Fix double free in idxd_setup_wqs()7.8 High
- debian linux, linux kernel +1 moredmaengine: ti: edma: Fix memory allocation size for queue_priority_map8.4 High
- linux, linux kernel +1 moreerofs: fix runtime warning on truncate_folio_batch_exceptionals()7.8 High
- unknown sureformsSureForms < 1.9.1 - Admin+ Stored XSS3.5 Low
- code-projects online bidding systemcode-projects Online Bidding System weweee.php sql injection6.9 Medium
- solarwinds web help deskSolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability9.8 Critical
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software print-payment.php sql injection5.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software inv-print.php sql injection5.3 Medium
- tenda ac21, ac21 firmware +1 moreTenda AC21 WifiExtraSet sub_45BB10 buffer overflow8.7 High
- asterisk, sangoma certified asterisk +1 moreAsterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation7.0 High
- wpsight wpcasaWPCasa <= 1.4.1 - Unauthenticated Code Injection9.8 Critical
- code-projects simple food ordering systemcode-projects Simple Food Ordering System order.php cross site scripting5.1 Medium
- marketing fire, llc widget options - extendedWidget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wplakeorg advanced views – display custom fields (acf, pods, metabox), posts, cpt and woo products anywhere in gutenberg, elementor, divi, beaver…Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI8.8 High
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software print1.php sql injection6.9 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software view_payorder.php sql injection5.3 Medium
- angeljudesuarez open source job portalitsourcecode Open Source Job Portal login.php sql injection6.9 Medium
- 1000projects bookstore management system1000projects Bookstore Management System login.php sql injection6.9 Medium
- emarket-design request a quoteWordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software fetch_product_details.php sql injection6.9 Medium
- sap se bi platformServer-Side Request Forgery in SAP BI Platform4.3 Medium
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System pro_edit1.php sql injection6.9 Medium
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System inv_edit1.php sql injection6.9 Medium
- viessmann vitogate 300Viessmann Vitogate 300 Authentication Bypass8.7 High
- viessmann vitogate 300Viessmann Vitogate 300 OS Command Injection8.5 High
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System sup_edit1.php sql injection6.9 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software edit.php sql injection5.3 Medium
- phpjabbers restaurant menu makerPHPJabbers Restaurant Menu Maker preview.php cross site scripting5.3 Medium
- campcodes online beauty parlor management systemCampcodes Online Beauty Parlor Management System sales-reports-detail.php sql injection5.3 Medium
- campcodes online beauty parlor management systemCampcodes Online Beauty Parlor Management System view-appointment.php sql injection5.3 Medium
- axboe fioaxboe fio init.c __parse_jobs_ini use after free4.8 Medium
bird3openSUSEbird3-3.1.4-1.1 on GA mediaNo score- tenda ac9 firmwareOS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection...6.5 Medium
- tenda ac9 firmwareBuffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.7.5 High
- dlink di-7100g firmwareBuffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the...7.5 High
- dlink di-7100g firmwareOS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd...6.5 Medium
- gp247GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability5.4 Medium
- free5gcFree5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile...7.5 High
- No product listedIn Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware v2.2.14), the web management...6.5 Medium
- yzmcmsCross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the...6.1 Medium
- No product listedIndian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in...5.3 Medium
- artifex mupdfA null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4...7.5 High
- broadcom tcpreplayA heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1....7.5 High
- Show moreLoading…