CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- codecanyon perfex crm, perfex crm crm +1 moreHTML injection in Perfex CRM5.3 Medium
- codecanyon perfex crm, perfex crm crm +1 moreHTML injection in Perfex CRM5.3 Medium
- codecanyon perfex crm, perfex crm crm +1 moreHTML injection in Perfex CRM5.3 Medium
- saison dataspider servistaImproper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and...8.8 High
- unknown postiePostie < 1.9.71 - Admin+ Stored XSS4.8 Medium
- beijing star-net ruijie network technology co., ltd. nbr2100g-eRuijie NBR2100G-E branch_passw.php listAction os command injection5.1 Medium
- abb terra ac wallboxHeap Memory Corruption Vulnerability6.9 Medium
- bjskzy zhiyou erpBjskzy Zhiyou ERP com.artery.richclient.RichClientService openForm xml external entity reference6.9 Medium
- bjskzy zhiyou erpBjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal5.3 Medium
- mirweiye wenkucmsmirweiye wenkucms common.php createPathOne os command injection5.3 Medium
- gstarsoft gstarcadGstarsoft GstarCAD File Renaming cross site scripting5.1 Medium
- statamic cms, wanglongcn yifang +1 moreYiFang CMS Backend File.php webUploader unrestricted upload5.1 Medium
- pmticket project-management-softwarepmTicket Project-Management-Software Cookie class.database.php loadLanguage deserialization6.9 Medium
- cudy tr1200Cudy TR1200 Wireless Settings config cross site scripting4.8 Medium
- canon inc. carps2 printer driver, generic fax driver, generic plus lips4 printer driver +10 more +12 moreOut-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver /...5.9 Medium
- canon inc. carps2 printer driver, generic fax driver, generic plus lips4 printer driver +10 more +12 moreUnallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver /...6.9 Medium
- canon inc. carps2 printer driver, generic fax driver, generic plus lips4 printer driver +10 more +12 moreOut-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver /...5.9 Medium
- ihongren pptp-vpniHongRen pptp-vpn XPC Service HelperTool.m shouldAcceptNewConnection missing authentication8.6 High
kamailioOSS-FuzzHeap-use-after-free in parse_from_headerNo score- apeman id71Apeman ID71 system.ini hard-coded credentials9.3 Critical
firefox-esrDebianfirefox-esr - regression updateNo score- magicmonty bash-git-promptbash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has...6.8 Medium
- publiccmsOS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b...8.2 High
- No product listedA reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows...8.1 High
- No product listedDefault credentials in Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows...6.5 Medium
- No product listedA stored cross-site scripting (XSS) vulnerability exists in the MyCourts v3 application within...7.3 High
- No product listedAn issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru...9.8 Critical
- No product listedIn the Payeer Android application 2.5.0, an improper access control vulnerability exists in the...6.0 Medium
- fairsketch rise ultimate project managerA cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9...6.1 Medium
- mealieMealie 3.0.1 and earlier is vulnerable to Cross-Site Scripting (XSS) in the recipe creation...9.0 Critical
- trivisionsecurity trivision nc-227wf firmwareTrivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username...5.3 Medium
- No product listedA security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an...8.2 High
- No product listedAT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the...7.5 High
- No product listedOpenindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP...7.5 High
- openml frontendThe openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling…3.5 Low
- cesanta mongooseAn integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By...7.5 High
- broadcom vmware aria operations and vmware tools, vmware aria operations, tools +7 more +9 moreVMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)7.8 High
- No product listedAn issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly...7.5 High
- langleyfcu online banking systemlangleyfcu Online Banking System Error Message connection_error.php cross site scripting5.3 Medium
- code-projects project monitoring systemcode-projects Project Monitoring System postjob.php cross site scripting5.1 Medium
- tenda ac18, ac18 firmware +1 moreTenda AC18 saveAutoQos stack-based overflow8.7 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 WizardHandle stack-based overflow8.7 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 AdvSetLanip command injection5.3 Medium
- tenda ac8, ac18 firmware +1 moreTenda AC8 SetServerConfig formSetServerConfig buffer overflow8.7 High
- angeljudesuarez hostel management systemitsourcecode Hostel Management System POST Request index.php cross site scripting5.3 Medium
- codeastro student grading systemCodeAstro Student Grading System adminLogin.php sql injection6.9 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow8.7 High
- code-projects simple scheduling systemcode-projects Simple Scheduling System add.home.php sql injection6.9 Medium
- code-projects simple scheduling systemcode-projects Simple Scheduling System addtime.php sql injection6.9 Medium
- codeastro online leave applicationCodeAstro Online Leave Application leaveAplicationForm.php sql injection5.3 Medium
- Show moreLoading…