CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- codeastro online leave applicationCodeAstro Online Leave Application signup.php sql injection5.3 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System myprofile.php cross site scripting5.3 Medium
- campcodes advanced online voting management system, advanced online voting system +1 moreCampcodes Advanced Online Voting Management System candidates_edit.php sql injection6.9 Medium
- campcodes online learning management systemCampcodes Online Learning Management System school_year.php sql injection6.9 Medium
- campcodes computer sales and inventory systemCampcodes Computer Sales and Inventory System us_edit.php sql injection6.9 Medium
- code-projects simple scheduling systemcode-projects Simple Scheduling System addroom.php sql injection6.9 Medium
- code-projects simple scheduling systemcode-projects Simple Scheduling System addcourse.php sql injection6.9 Medium
- code-projects simple scheduling systemcode-projects Simple Scheduling System addfaculty.php sql injection6.9 Medium
- code-projects simple scheduling systemcode-projects Simple Scheduling System addsubject.php sql injection6.9 Medium
- codeastro electricity billing systemCodeAstro Electricity Billing System bill.php sql injection5.3 Medium
- projectworlds online tours and travelsProjectworlds Online Tours and Travels change-image.php unrestricted upload5.1 Medium
- campcodes online learning management systemCampcodes Online Learning Management System edit_content.php sql injection6.9 Medium
- angeljudesuarez open source job portalitsourcecode Open Source Job Portal index.php sql injection6.9 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_wifi_blacklists uci_set command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X delete_prohibiting uci_del command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_wifi_blacklists command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_device_name command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X diag_traceroute command injection5.3 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X delete_offline_device command injection5.3 Medium
- akilli commerce software technologies ltd. co. e-commerce website, fabian e-commerce site +1 morecode-projects E-Commerce Website admin_product_details.php sql injection6.9 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_switch_settings sub_412E7C command injection5.3 Medium
- tenda ac21, ac21 firmware +1 moreTenda AC21 SetStaticRouteCfg sscanf buffer overflow8.7 High
- angeljudesuarez open source job portalitsourcecode Open Source Job Portal index.php sql injection5.3 Medium
- kidaze courseselectionsystemkidaze CourseSelectionSystem COUNT3s4.php sql injection6.9 Medium
arrowOSS-FuzzHeap-buffer-overflow in int arrow::bit_util::BitReader::GetBatch<int>No scorefirefox-esrDebianfirefox-esr - regression updateNo score- gimpGIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimp, debian linux +1 moreGIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- angeljudesuarez open source job portalitsourcecode Open Source Job Portal index.php sql injection5.3 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow4.8 Medium
- gnu binutilsGNU Binutils objdump.c dump_dwarf_section out-of-bounds4.8 Medium
- zhuimengshaonian wisdom-educationzhuimengshaonian wisdom-education ExamInfoController.java selectStudentExamInfoList improper authorization5.3 Medium
- campcodes farm management systemCampcodes Farm Management System file information disclosure6.9 Medium
- angeljudesuarez open source job portalitsourcecode Open Source Job Portal controller.php unrestricted upload5.3 Medium
- campcodes online learning management systemCampcodes Online Learning Management System add_content.php sql injection6.9 Medium
- campcodes online learning management systemCampcodes Online Learning Management System edit_teacher.php sql injection6.9 Medium
- campcodes online learning management systemCampcodes Online Learning Management System de_activate.php sql injection6.9 Medium
- code-projects project monitoring systemcode-projects Project Monitoring System login.php sql injection6.9 Medium
- keyfactor rg-ew5100beKeyfactor RG-EW5100BE HTTP POST Request cmd command injection5.1 Medium
- seacmsSeaCMS Cron Task Management admin_cron.php sql injection5.1 Medium
- projectworlds online shopping systemProjectworlds Online Shopping System cart_add.php sql injection6.9 Medium
- run-llama run-llama/llama indexInsecure Temporary File Handling in run-llama/llama_index7.3 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- westboy cicadascmswestboy CicadasCMS Add Department save cross site scripting4.8 Medium
- westboy cicadascmswestboy CicadasCMS save cross site scripting4.8 Medium
- projectworlds visitor management systemProjectworlds Visitor Management System Add Visitor myform.php cross site scripting4.8 Medium
- code-projects online bidding systemcode-projects Online Bidding System bidlist.php sql injection6.9 Medium
- Show moreLoading…