CVE-2025 list

CVE-2025 records published in September 2025

Page two of four: records 1,001 to 2,000 of the 3,729 published in September 2025, newest first. The first page carries the figures for September 2025.

CVE-2025 records published in September 2025, newest first: records 1,001 to 2,000 of 3,729
CVE Summary CVSS EPSS Published Signals
CVE-2025-58234JS Job Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-09-22
CVE-2025-58233SQL Chart Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58232Image Editor by Pixo WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22
CVE-2025-58231Bitly WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22
CVE-2025-58230ZoloBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58229Sitekit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22
CVE-2025-58228Quick View for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58227Podlove Subscribe button WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-582263D FlipBook PDF Flipbook Viewer, Flipbook Image Gallery WordPress plugin sensitive data exposure5.3CNA v3.10.8%2025-09-22NucleiFix
CVE-2025-58224Printeers Print and Ship WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-09-22
CVE-2025-58223VoucherPress WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-58222Team Manager WordPress plugin Dynamic Web Lab missing authorization5.3CNA v3.10.3%2025-09-22
CVE-2025-58221PilotPress WordPress plugin broken access control4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-58220Card Elements for WPBakery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58219Show Pages List WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22
CVE-2025-58200Flexible FAQ WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22
CVE-2025-58199Fastly WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22Fix
CVE-2025-58033Draft WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-58032WP Compiler WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22
CVE-2025-58031Nextend Facebook Connect WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58030Page-list WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58029Classic Widgets with Block-based Widgets WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22
CVE-2025-58028Designil PDPA Thailand WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58027NGG Smart Image Search WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58026Termageddon: Cookie Consent and Privacy Compliance WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58025Master Slider WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-09-22Fix
CVE-2025-58023Genealogical Tree WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22
CVE-2025-58022ShortCode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-58021List Child Pages Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-58020Theater for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-58019Search Atlas SEO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-58018Mail Subscribe List WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-58017Ultimate Store Kit Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58016CF7 Submissions WordPress plugin broken access control4.3CNA v3.10.2%2025-09-22
CVE-2025-58015Quiz Maker WordPress plugin sensitive data exposure7.5v3.10.3%2025-09-22Fix
CVE-2025-58014Quiz Maker WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22Fix
CVE-2025-58013CouponXxL WordPress theme cross-site request forgery (CSRF)8.8CNA v3.10.2%2025-09-22
CVE-2025-58012Content Mask WordPress plugin insecure direct object references (IDOR)3.8CNA v3.10.3%2025-09-22Fix
CVE-2025-58011Content Mask WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.2%2025-09-22Fix
CVE-2025-58010SV Proven Expert WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22
CVE-2025-58009CP Multi View Event Calendar WordPress plugin broken access control3.8CNA v3.10.3%2025-09-22Fix
CVE-2025-58008Participants Database WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58007NerdPress Hubbub Lite information disclosure4.3CNA v3.10.3%2025-09-22Fix
CVE-2025-58006WP Gravity Forms Keap/Infusionsoft WordPress plugin open redirection4.7CNA v3.10.3%2025-09-22Fix
CVE-2025-58005DriCub WordPress theme server side request forgery (SSRF)5.4CNA v3.10.2%2025-09-22
CVE-2025-58004DriCub WordPress theme broken access control5.3CNA v3.10.3%2025-09-22
CVE-2025-58003Javo Core WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22
CVE-2025-58002GD bbPress Tools WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58001Compact Archives WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-58000Memberful WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57999WPKoi Templates for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57998E-namad and Shamed Logo Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-57997Trustpilot Reviews WordPress plugin broken access control4.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57996Buckets WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22
CVE-2025-57995DethemeKit For Elementor WordPress plugin broken access control4.3CNA v3.10.2%2025-09-22
CVE-2025-57994Upcoming Events Lists WordPress plugin insecure direct object references (IDOR)5.4CNA v3.10.3%2025-09-22
CVE-2025-57993Geolocation IP Detection WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57992Mail Baby SMTP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22Fix
CVE-2025-57991Clariti WordPress plugin broken access control5.4CNA v3.10.3%2025-09-22Fix
CVE-2025-57990Blog Designer WordPress plugin broken access control5.4CNA v3.10.3%2025-09-22
CVE-2025-57989WordPress Widgets Shortcode plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22
CVE-2025-57988Uncanny Toolkit for LearnDash WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57987WP Events Manager WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57986WP Subtitle WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57985Ultimate Watermark WordPress plugin broken access control4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-57984MakeStories (for Google Web Stories) WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2025-09-22
CVE-2025-57983BP Disable Activation Reloaded WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2025-09-22
CVE-2025-57982Advance Portfolio Grid WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22Fix
CVE-2025-57981WP Social Widget WordPress plugin cross-site scripting (XSS)5.4NVD v3.10.2%2025-09-22
CVE-2025-57980Safety Exit WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22Fix
CVE-2025-57979AuthorSure WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-57978Advanced Appointment Booking and Scheduling WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22Fix
CVE-2025-57977Flexible PDF Invoices for WooCommerce and WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-09-22Fix
CVE-2025-57976CardCom Payment Gateway WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22
CVE-2025-57975RadiusTheme Team missing authorization4.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57974TZ PlusGallery WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-57973WP-Members WordPress plugin cross-site scripting (XSS)5.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57972Helpdesk Support Ticket System for WooCommerce WordPress plugin broken access control4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-57971SALESmanago WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57970SALESmanago WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-22Fix
CVE-2025-57969Hide WP Toolbar WordPress plugin broken access control4.3CNA v3.10.2%2025-09-22
CVE-2025-57968VikRestaurants Table Reservations and Take-Away WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-09-22Fix
CVE-2025-57967WPB Quick View for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57966Gallery Lightbox WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57965WP Proposals WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-57964Library Bookshelves WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-57963Zoho Billing WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57962VikRestaurants Table Reservations and Take-Away WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-57961CoDesigner WordPress plugin broken access control4.3CNA v3.10.4%2025-09-22Fix
CVE-2025-57960Travel Map WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-57959Slightly troublesome permalink WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57957WooMS WordPress plugin broken access control5.3CNA v3.10.4%2025-09-22
CVE-2025-57956WooMS WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57955Post Carousel Slider for Elementor WordPress plugin broken access control6.5CNA v3.10.5%2025-09-22
CVE-2025-57954Poll Maker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57953Open User Map WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57952Maps for WP WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57951SiteNarrator Text-to-Speech Widget WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57950Plugin Security Scanner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57949Ongkoskirim.id WordPress plugin broken access control5.4CNA v3.10.4%2025-09-22
CVE-2025-57948Directory Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-57947Photo Gallery by Ays WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57946payOS WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-09-22
CVE-2025-57945WP Advanced PDF WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57944Skimlinks Affiliate Marketing Tool WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57943Skimlinks Affiliate Marketing Tool WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.3%2025-09-22
CVE-2025-57942Emergency Password Reset WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-57941Append Link on Copy WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57940Append extensions on Pages WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57939Image Hover Effects Elementor Addon WordPress plugin broken access control5.3CNA v3.10.4%2025-09-22
CVE-2025-57938Easy Hotel Booking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57937WPeMatico RSS Feed Fetcher WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57936Subresource Integrity (SRI) Manager WordPress plugin broken access control4.3CNA v3.10.3%2025-09-22
CVE-2025-57935Bot Block Stop Spam Referrals in Google Analytics WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-57934LWS Affiliation WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-57933Piotnet Forms WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-57932PowerFolio WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57930Double the Donation WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-57929Double the Donation WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22Fix
CVE-2025-57928AWP Classifieds WordPress plugin content injection5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57927Dashboard Notepad WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-57926Passster WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Exploit codeFix
CVE-2025-57925immonex Kickstart Team WordPress plugin local file inclusion7.5CNA v3.10.5%2025-09-22Fix
CVE-2025-57924Developer WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-57923UK Address Postcode Validation WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57922Envíos Coordinadora Woocommerce WordPress plugin sensitive data exposure5.3CNA v3.10.4%2025-09-22
CVE-2025-57921Frontend File Manager WordPress plugin broken access control5.3CNA v3.10.3%2025-09-22Fix
CVE-2025-57920Category Featured Images Extended WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-22
CVE-2025-57919ConveyThis WordPress plugin PHP object injection7.2CNA v3.10.7%2025-09-22Fix
CVE-2025-57918LinkedInclude WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-22
CVE-2025-57917Printcart Web to Print Product Designer for WooCommerce WordPress plugin broken access control4.3CNA v3.10.3%2025-09-22
CVE-2025-57916WP System Information WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-09-22
CVE-2025-57915TOCHAT.BE WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-57914Deliver via Shipos for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22Fix
CVE-2025-57913Behance Portfolio Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-22Fix
CVE-2025-57912Dialogity Free Live Chat WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-57911Adverts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-57910AnyClip Luminous Studio WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-57909Editor Custom Color Palette WordPress plugin broken access control6.5CNA v3.10.5%2025-09-22
CVE-2025-57908Product Time Countdown for WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57907Heureka WordPress plugin broken access control5.3CNA v3.10.4%2025-09-22Fix
CVE-2025-57906Epeken All Kurir WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-57905AgreeMe Checkboxes For WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-57904Sales Count Manager for WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-57903WooCommerce Additional Fees On Checkout (Free) WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-57902Md Taufiqur Rahman RIS cross-site request forgery6.5CNA v3.10.2%2025-09-22
CVE-2025-57900GutenKit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57899WP Compress WordPress plugin broken access control5.3CNA v3.10.5%2025-09-22Fix
CVE-2025-57898WP Frontend Admin WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-57685LB-Link routers set_serial_cfg interface command injection8.8CISA ADP v3.11.2%2025-09-22
CVE-2025-57682Papermark path traversal6.5CISA ADP v3.10.7%2025-09-22
CVE-2025-57605AiKaan IoT Platform department admin assignment API privilege escalation8.8CISA ADP v3.10.3%2025-09-22
CVE-2025-57602AiKaan IoT Platform proxyuser SSH account hard-coded credentials9.8CISA ADP v3.10.5%2025-09-22
CVE-2025-57601AiKaan Cloud Controller remote terminal SSH tunnel hard-coded credentials9.8CISA ADP v3.10.4%2025-09-22
CVE-2025-57441Blackmagic Design Atem Mini Pro information disclosure9.8CISA ADP v3.10.6%2025-09-22
CVE-2025-57440ATEM Mini Pro Telnet control interface vulnerability7.5CISA ADP v3.10.3%2025-09-22
CVE-2025-57439Creacast Creabox Manager code injection8.8CISA ADP v3.10.8%2025-09-22
CVE-2025-574382wcom Ip-4c improper authorization6.8CISA ADP v3.10.3%2025-09-22
CVE-2025-57437Blackmagic Design Web Presenter Hd Firmware information disclosure9.8CISA ADP v3.10.5%2025-09-22
CVE-2025-57434Creacast Creabox Manager improper authentication8.8CISA ADP v3.10.5%2025-09-22
CVE-2025-574332wcom Ip-4c information disclosure6.5CISA ADP v3.10.4%2025-09-22
CVE-2025-57432Blackmagic Design Web Presenter 4K missing authentication9.8CISA ADP v3.10.6%2025-09-22
CVE-2025-57431SOUND4 Pulse-eco AES67 download without integrity check8.8CISA ADP v3.10.3%2025-09-22
CVE-2025-57430Creacast Creabox Manager information disclosure7.5CISA ADP v3.10.4%2025-09-22
CVE-2025-57205Inilabs School Express cross-site scripting5.4CISA ADP v3.10.3%2025-09-22
CVE-2025-57204Adobe Stocky POS with Inventory Management & HRM (ui-lib) stored cross-site scripting5.4CISA ADP v3.10.3%2025-09-22
CVE-2025-57203Adobe MagicProject AI cross-site scripting4.8CISA ADP v3.10.2%2025-09-22
CVE-2025-56075PHPGurukul Park Ticketing Management System SQL injection5.4CISA ADP v3.10.3%2025-09-22
CVE-2025-56074PHPGurukul Park Ticketing Management System SQL injection9.8CISA ADP v3.10.5%2025-09-22
CVE-2025-55888Ard Gec En Ligne cross-site scripting7.3CISA ADP v3.10.4%2025-09-22Exploit code
CVE-2025-55887Ard Gec En Ligne cross-site scripting6.1CISA ADP v3.10.4%2025-09-22Exploit code
CVE-2025-55886ARD payment history API endpoint insecure direct object reference6.5CISA ADP v3.10.4%2025-09-22
CVE-2025-55885Ard Gec En Ligne Alpes Recherche et Developpement SQL injection6.3CISA ADP v3.10.4%2025-09-22Exploit code
CVE-2025-53570DELUCKS SEO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22
CVE-2025-53469BMI Adult and Kid Calculator WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-53468Wp tabber widget WordPress plugin SQL injection8.5CNA v3.10.4%2025-09-22
CVE-2025-53467Login-Logout WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-53466Better Find and Replace WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-53465GSheets Connector WordPress plugin PHP object injection7.2CNA v3.10.6%2025-09-22
CVE-2025-53464WP Mailto Links WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-53463HT Mega Absolute Addons for WPBakery Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-53462SAPO Feed WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-53461Beaf WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.3%2025-09-22
CVE-2025-53460AffiliateWP External Referral Links WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-53458Goracash WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22
CVE-2025-53457SEO Backlink Monitor WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.3%2025-09-22
CVE-2025-53456SEO Backlink Monitor WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-09-22
CVE-2025-53455CashBill.pl Płatności WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-09-22Fix
CVE-2025-53454Ultimate WP Mail WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-09-22Fix
CVE-2025-53452Event Rocket WordPress plugin broken access control4.3CNA v3.10.3%2025-09-22
CVE-2025-53451Mihdan: No External Links WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-09-22Fix
CVE-2025-53450Easy Pricing Table WP WordPress plugin local file inclusion7.5CNA v3.10.7%2025-09-22
CVE-2025-52367Pivotx cross-site scripting5.4CISA ADP v3.14.1%2025-09-22MetasploitExploit code
CVE-2025-51006Broadcom tcpreplay double free7.8CISA ADP v3.10.2%2025-09-22Fix
CVE-2025-47910CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http5.4CISA ADP v3.10.3%2025-09-22Fix
CVE-2025-46711GPU Ddk null pointer dereference occurs in LockHandle on bridge entry when connection misused5.5CISA ADP v3.10.1%2025-09-22Fix
CVE-2025-439532wcom IP-4c ping and traceroute fields command injection8.8CISA ADP v3.17.6%2025-09-22Emerging Threats
CVE-2025-43814Liferay Portal and DXP audit events record password reminder answers6.9CNA v4.00.4%2025-09-22Fix
CVE-2025-43810Liferay Portal and DXP allows users to add a note to a different virtual instance5.3CNA v4.00.3%2025-09-22Fix
CVE-2025-43807Liferay has a stored cross-site scripting (XSS) vulnerability via a a publication’s Name text field4.8CNA v4.00.2%2025-09-22Fix
CVE-2025-43806Liferay Portal and DXP does not properly check permission with import and export tasks5.3CNA v4.00.3%2025-09-22Fix
CVE-2025-36202IBM webMethods Integration code execution7.5CNA v3.10.3%2025-09-22Fix
CVE-2025-36064IBM Sterling Connect:Express for Microsoft Windows information disclosure5.9CNA v3.10.5%2025-09-22Fix
CVE-2025-36037IBM webMethods Integration server-side request forgery5.4CNA v3.10.2%2025-09-22Fix
CVE-2025-35042Airship AI Acropolis default credentials9.3CNA v4.00.4%2025-09-22Fix
CVE-2025-35041Airship AI Acropolis MFA insufficient rate limiting7.7CNA v4.00.3%2025-09-22Fix
CVE-2025-25177GPU DDK Roll-back of pvr_exp_fence not in finalised state can cause UAF5.1CISA ADP v3.10.1%2025-09-22Fix
CVE-2025-10854Symlink following in txtai leads to arbitrary file write when loading untrusted embedding indices8.1CNA v3.10.5%2025-09-22
CVE-2025-10821fuyang_lipengjun platform queryAll TopicCategoryController improper authorization5.3CNA v4.00.4%2025-09-22
CVE-2025-10820fuyang_lipengjun platform queryAll TopicController improper authorization5.3CNA v4.00.4%2025-09-22
CVE-2025-10819fuyang_lipengjun platform queryAll UserCouponController improper authorization5.3CNA v4.00.4%2025-09-22
CVE-2025-10817Campcodes Online Learning Management System admin_user.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10816Jinher OA XML text XML external entity reference9.8v3.10.5%2025-09-22
CVE-2025-10815Tenda AC20 HTTP POST Request SetPptpServerCfg strcpy buffer overflow8.7CNA v4.00.8%2025-09-22Emerging Threats
CVE-2025-10814D-Link DIR-823X goahead command injection8.8v3.16.1%2025-09-22Emerging Threats
CVE-2025-10813code-projects Hostel Management System index.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10812code-projects Hostel Management System index.php SQL injection9.8v3.10.5%2025-09-22
CVE-2025-10811code-projects Hostel Management System index.php SQL injection9.8v3.10.7%2025-09-22
CVE-2025-10810Campcodes Online Learning Management System edit_user.php SQL injection9.8v3.10.7%2025-09-22
CVE-2025-10809Campcodes Online Learning Management System department.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10808Campcodes Farm Management System uploadProduct.php SQL injection9.8NVD v3.10.4%2025-09-22
CVE-2025-10807Campcodes Online Beauty Parlor Management System edit-customer-detailed.php SQL injection8.8v3.10.4%2025-09-22
CVE-2025-10806Campcodes Online Beauty Parlor Management System bwdates-reports-details.php SQL injection8.8v3.10.4%2025-09-22
CVE-2025-10805Campcodes Online Beauty Parlor Management System add-services.php SQL injection8.8v3.10.4%2025-09-22
CVE-2025-10804Campcodes Online Beauty Parlor Management System add-customer.php SQL injection8.8v3.10.4%2025-09-22
CVE-2025-10803Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow8.7CNA v4.00.8%2025-09-22Emerging Threats
CVE-2025-10802code-projects Online Bidding System remove.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10801SourceCodester Pet Grooming Management Software edit_tax.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10800itsourcecode Online Discussion Forum index.php SQL injection9.8v3.10.5%2025-09-22
CVE-2025-10799code-projects Hostel Management System index.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10798code-projects Hostel Management System index.php SQL injection9.8NVD v3.10.4%2025-09-22
CVE-2025-10797code-projects Hostel Management System index.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10796code-projects Hostel Management System login.php SQL injection9.8NVD v3.10.4%2025-09-22
CVE-2025-10795code-projects Online Bidding System bidupdate.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10794PHPGurukul Car Rental Project search.php cross-site scripting6.1v3.10.4%2025-09-22
CVE-2025-10793code-projects E-Commerce Website admin_account_delete.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10792D-Link DIR-513 formWPS buffer overflow8.7CNA v4.03.2%2025-09-22Emerging Threats
CVE-2025-10791code-projects Online Bidding System index.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10790SourceCodester Simple Forum Discussion System ajax.php SQL injection8.8v3.10.3%2025-09-22
CVE-2025-10789SourceCodester Online Hotel Reservation System deleteslide.php SQL injection9.8v3.10.5%2025-09-22
CVE-2025-10788SourceCodester Online Hotel Reservation System deleteroominventory.php SQL injection9.8v3.10.5%2025-09-22
CVE-2025-10787MuYuCMS Add Fiend Link index.html server-side request forgery5.3CNA v4.00.3%2025-09-22
CVE-2025-10786Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10785Campcodes Grocery Sales and Inventory System manage_user.php SQL injection9.8v3.10.6%2025-09-22
CVE-2025-10784Campcodes Online Learning Management System edit_subject.php SQL injection9.8v3.10.5%2025-09-22
CVE-2025-10783Campcodes Online Learning Management System add_subject.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10782Campcodes Online Learning Management System class.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10781Campcodes Online Learning Management System edit_class.php SQL injection9.8v3.10.4%2025-09-22
CVE-2025-10780CodeAstro Simple Pharmacy Management view.php SQL injection8.8v3.10.3%2025-09-22
CVE-2025-10779D-Link DCS-935L HNAP1 sub_402280 stack-based overflow9.8v3.10.9%2025-09-22
CVE-2025-10778Smartstore Gift Voucher confirm race condition2.3CNA v4.00.2%2025-09-22
CVE-2025-10777JSC R7 R7-Office Document Server downloadas path traversal5.3CNA v4.00.4%2025-09-22
CVE-2025-10776LionCoders SalePro POS login cleartext transmission6.3CNA v4.00.3%2025-09-22
CVE-2025-10775Wavlink WL-NU516U1 login.cgi sub_4012A0 os command injection7.2v3.120.0%2025-09-22
CVE-2025-10774Ruijie 6000-E10 sub_commit.php os command injection5.1CNA v4.04.0%2025-09-22
CVE-2025-10773B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflow8.7CNA v4.04.0%2025-09-22
CVE-2025-10772huggingface LeRobot ZeroMQ Socket lekiwi_remote.py missing authentication5.3CNA v4.00.3%2025-09-22
CVE-2025-10009Authenticated admin RCE in Invoice Ninja8.6CNA v4.00.5%2025-09-22Fix
CVE-2025-9983GALAYOU G2 lack of Authentication for RTSP stream7.1CNA v4.00.7%2025-09-22Exploit code
CVE-2025-9960is-localhost-ip SSRF via Restrictions bypass6.9CNA v4.00.4%2025-09-22
CVE-2025-9541Markup Markdown WordPress plugin Contributor+ stored XSS4.7CISA ADP v3.10.2%2025-09-22Fix
CVE-2025-9540Markup Markdown WordPress plugin Contributor+ stored XSS4.7CISA ADP v3.10.2%2025-09-22Fix
CVE-2025-9487Admin and Site Enhancements WordPress plugin authenticated stored XSS via SVG4.7CISA ADP v3.10.2%2025-09-22Fix
CVE-2025-9115Etsy Shop WordPress plugin reflected XSS via $_SERVER['REQUEST_URI']5.6CISA ADP v3.10.2%2025-09-22Fix
CVE-2025-9038S1 Agile privilege escalation7.5CNA v4.00.1%2025-09-22
CVE-2025-9035Reflected XSS in Horato Internet Technologies' Virtual Library Platform5.4CNA v3.10.3%2025-09-22Fix
CVE-2025-8892Autodesk Shared Components PRT File Parsing memory corruption7.8CNA v3.10.2%2025-09-22Fix
CVE-2025-8079Reflected XSS in Akıllı Ticaret Software Technologies' Smart Trade E-Commerce4.6CNA v3.10.2%2025-09-22Fix
CVE-2025-5962Red Hat Enterprise Linux Lightspeed history service improper access control7.7CNA v3.10.2%2025-09-22Fix
CVE-2025-0875IDOR in Proliz Software's OBS6.5CNA v3.10.4%2025-09-22Fix
CVE-2025-53692Sitecore Experience Platform cross-site scripting7.1CNA v3.10.4%2025-09-21
CVE-2025-10771jeecgboot JimuReport DB2 JDBC testConnection deserialization9.8v3.10.6%2025-09-21
CVE-2025-10770jeecgboot JimuReport MySQL JDBC testConnection deserialization6.5v3.10.4%2025-09-21
CVE-2025-10769h2oai h2o-3 H2 JDBC Driver ImportSQLTable deserialization9.8v3.10.5%2025-09-21
CVE-2025-10768h2oai h2o-3 IBMDB2 JDBC Driver ImportSQLTable deserialization9.8NVD v3.10.4%2025-09-21
CVE-2025-10767CosmodiumCS OnlyRAT Configuration file main.py remote_download os command injection2.0CNA v4.01.1%2025-09-21
CVE-2025-10766SeriaWei ZKEACMS EventViewerController.cs download path traversal5.3CNA v4.00.6%2025-09-21
CVE-2025-10765SeriaWei ZKEACMS SEOSuggestions ZKEACMS.SEOSuggestions.dll server-side request forgery7.2v3.10.4%2025-09-21
CVE-2025-10764SeriaWei ZKEACMS Event Action System PendingTaskController.cs Edit server-side request forgery8.8v3.10.4%2025-09-21
CVE-2025-10763academico-sis academico Profile Picture edit-photo unrestricted upload5.3CNA v4.00.3%2025-09-21
CVE-2025-10762kuaifan DooTask UsersController.php SQL injection5.3CNA v4.00.3%2025-09-21
CVE-2025-10761Harness Login endpoint login excessive authentication6.3CNA v4.00.5%2025-09-21
CVE-2025-10760Harness lookup_repo.go LookupRepo server-side request forgery5.3CNA v4.00.3%2025-09-21
CVE-2025-10759Webkul QloApps CSRF Token authorization6.9CNA v4.00.3%2025-09-21
CVE-2025-10758Htmly Custom field post cross-site scripting4.8v3.10.3%2025-09-21
CVE-2025-10757UTT 1200GW formConfigDnsFilterGlobal buffer overflow8.7CNA v4.01.1%2025-09-21
CVE-2025-6544Deserialization vulnerability in h2oai/h2o-39.8CNA v3.00.9%2025-09-21Fix
CVE-2025-40925Starch generate session ids insecurely9.1CISA ADP v3.10.4%2025-09-20
CVE-2025-10756UTT HiPER 840G getOneApConfTempEntry buffer overflow8.7CNA v4.00.9%2025-09-20
CVE-2025-10755Selleo Mentingo Content-type unrestricted upload5.3CNA v4.00.3%2025-09-20
CVE-2025-10741Selleo Mentingo Profile Picture unrestricted upload5.3CNA v4.00.3%2025-09-20
CVE-2025-10658SupportCandy WordPress plugin authentication bypass6.5CNA v3.10.3%2025-09-20Exploit codeFix
CVE-2025-10652Robcore Netatmo WordPress plugin SQL injection6.5CNA v3.10.3%2025-09-20
CVE-2025-10489Brainstorm Force SureForms missing authorization4.3CNA v3.10.2%2025-09-20Fix
CVE-2025-10305Secure Passkeys WordPress plugin missing authorization authenticated Passkey exposure and deletion5.3CNA v3.10.2%2025-09-20Fix
CVE-2025-10181Draft List WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-20Fix
CVE-2025-10002ClickWhale WordPress plugin authenticated (Admin+) SQL injection4.9CNA v3.10.3%2025-09-20Fix
CVE-2025-9949Internal Links Manager WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-20Fix
CVE-2025-9887Custom Login And Signup Widget WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-09-20
CVE-2025-9883Browser Sniff WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-09-20
CVE-2025-9882osTicket WP Bridge WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-09-20
CVE-2025-59717@DigitalOcean/Do-markdownit has type confusion9.8v3.10.4%2025-09-19
CVE-2025-59715SMSEagle cross-site scripting5.4v3.10.2%2025-09-19Fix
CVE-2025-59714Internet2 Grouper incorrect authorization4.9v3.10.3%2025-09-19Fix
CVE-2025-59713Snipe-IT allows unsafe deserialization8.1v3.10.4%2025-09-19KCVFix
CVE-2025-59712snipeitapp Snipe-IT cross-site scripting5.4v3.10.3%2025-09-19KCVFix
CVE-2025-59689Libraesva Email Security Gateway command injection6.1CNA v3.11.9%2025-09-19KEVFix
CVE-2025-59431MapServer WFS XML Filter Query SQL injection8.9CNA v4.00.4%2025-09-19Fix
CVE-2025-59427Cloudflare vite plugin exposes secrets over the built-in dev server2.9CNA v4.00.4%2025-09-19Fix
CVE-2025-59344AliasVault vulnerable to server-side request forgery via Favicon Extraction7.7CNA v3.10.3%2025-09-19Fix
CVE-2025-58114Hallo Welt! BlueSpice potential XSS in Extension:CognitiveProcessDesigner4.8v3.10.2%2025-09-19Fix
CVE-2025-57880Hallo Welt! BlueSpice potential XSS in Extension:BlueSpiceWhoIsOnline5.4v3.10.2%2025-09-19Fix
CVE-2025-57644Accela Automation Platform path traversal9.1CISA ADP v3.10.7%2025-09-19
CVE-2025-57528Tenda AC6 denial of service7.7CISA ADP v3.10.4%2025-09-19Emerging Threats
CVE-2025-57396Tandoor recipes improper privilege management6.5CISA ADP v3.10.2%2025-09-19
CVE-2025-57296Tenda AC6 command injection6.5CISA ADP v3.13.3%2025-09-19Reported exploitedEmerging ThreatsFix
CVE-2025-56869Sync-in Server Sync In server thru path traversal5.3CISA ADP v3.10.7%2025-09-19Fix
CVE-2025-56762Paracrawl Keops cross-site scripting6.1CISA ADP v3.10.3%2025-09-19Exploit code
CVE-2025-55910CmsEasy incomplete cleanup6.3CISA ADP v3.10.2%2025-09-19
CVE-2025-54815Yandaozi Ppress server-side template injection8.8CISA ADP v3.10.6%2025-09-19Fix
CVE-2025-54761Yandaozi Ppress improper privilege management8.0CISA ADP v3.10.3%2025-09-19Fix
CVE-2025-52159Yandaozi Ppress default configuration hard-coded credentials8.8CISA ADP v3.10.4%2025-09-19
CVE-2025-48703CWP Control Web Panel OS command injection9.0CNA v3.199.7%2025-09-19KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-48007Hallo Welt! BlueSpice potential XSS in Extension:BlueSpiceAvatars6.4v3.10.2%2025-09-19Fix
CVE-2025-46703Hallo Welt! BlueSpice potential XSS in Extension:AtMentions6.4v3.10.2%2025-09-19Fix
CVE-2025-43809Liferay Portal cross-site request forgery (CSRF)5.1CNA v4.00.2%2025-09-19Fix
CVE-2025-43808Liferay Portal Commerce component has incorrect permission assignment for critical resource6.9CNA v4.00.4%2025-09-19Fix
CVE-2025-43803Liferay Contacts Center widget has insecure direct object reference6.9CNA v4.00.3%2025-09-19Fix
CVE-2025-39866Linux kernel writeback inode dirty tracking use-after-free7.8CNA v3.10.3%2025-09-19Exploit codeFix
CVE-2025-39865Linux kernel tee null pointer dereference5.5v3.10.2%2025-09-19Fix
CVE-2025-39864Linux kernel cfg80211 BSS scan cache use-after-free8.8CNA v3.10.2%2025-09-19Fix
CVE-2025-39863Linux kernel brcmfmac Wi-Fi Bluetooth coexistence worker use-after-free7.8CNA v3.10.2%2025-09-19Fix
CVE-2025-39862Linux kernel mt76 mt7915 Wi-Fi driver station list out-of-bounds write8.8CNA v3.10.2%2025-09-19Fix
CVE-2025-39861Linux kernel Bluetooth vhci debugfs interface use-after-free7.8v3.10.2%2025-09-19Fix
CVE-2025-39860Linux kernel Bluetooth L2CAP socket listener cleanup use-after-free8.0CNA v3.10.2%2025-09-19Fix
CVE-2025-39859Linux kernel PTP OCP driver watchdog timer use-after-free7.8NVD v3.10.2%2025-09-19Fix
CVE-2025-39858Linux kernel mlx4 null pointer dereference5.5v3.10.1%2025-09-19Fix
CVE-2025-39857Linux kernel net/smc null pointer dereference7.5CNA v3.10.3%2025-09-19Fix
CVE-2025-39856Linux kernel TI AM65 CPSW Ethernet driver null pointer dereference5.5v3.10.1%2025-09-19Fix
CVE-2025-39855Linux kernel ice Ethernet driver PTP timestamp interrupt use-after-free7.8v3.10.2%2025-09-19Fix
CVE-2025-39854Linux kernel ice Ethernet driver low-latency timestamp interrupt use-after-free7.8CNA v3.10.2%2025-09-19Fix
CVE-2025-39853Linux kernel i40e Ethernet driver MAC address list out-of-bounds read7.1v3.10.2%2025-09-19Fix
CVE-2025-39852Linux kernel TCP-AO IPv6 handshake memory leak5.5v3.10.1%2025-09-19Fix
CVE-2025-39851Linux kernel VXLAN FDB nexthop handling null pointer dereference7.5CNA v3.10.3%2025-09-19Fix
CVE-2025-39850Linux kernel VXLAN ARP and neighbor proxy null pointer dereference5.5NVD v3.10.1%2025-09-19Fix
CVE-2025-39849Linux kernel cfg80211 SSID length handling out-of-bounds write8.8CNA v3.10.2%2025-09-19Fix
CVE-2025-39848Linux kernel AX.25 KISS driver vulnerability8.8CNA v3.10.2%2025-09-19Fix
CVE-2025-39847Linux kernel PPP compression memory leak5.5v3.10.2%2025-09-19Fix
CVE-2025-39846Linux kernel PCMCIA I/O resource allocation null pointer dereference5.5v3.10.2%2025-09-19Fix
CVE-2025-39845Linux kernel x86-64 page table synchronization denial of service5.5NVD v3.10.2%2025-09-19Fix
CVE-2025-39844Linux kernel page table synchronization denial of service5.5v3.10.1%2025-09-19Fix
CVE-2025-39843Linux kernel slub memory allocator deadlock5.5v3.10.1%2025-09-19Fix
CVE-2025-39842Linux kernel OCFS2 filesystem null pointer dereference5.5v3.10.2%2025-09-19Fix
CVE-2025-39841Linux kernel lpfc use-after-free9.8CNA v3.10.5%2025-09-19Fix
CVE-2025-39840Linux kernel audit path comparison out-of-bounds read7.1CNA v3.10.2%2025-09-19Fix
CVE-2025-39839Linux kernel batman-adv out-of-bounds read8.8CNA v3.10.3%2025-09-19Fix
CVE-2025-39838Linux kernel CIFS UTF-16 conversion null pointer dereference5.5v3.10.2%2025-09-19Fix
CVE-2025-39837Linux kernel Asus WMI driver out-of-bounds write7.8CNA v3.10.2%2025-09-19Fix
CVE-2025-36248IBM Copy Services Manager cross-site scripting6.1CNA v3.10.2%2025-09-19Fix
CVE-2025-34206Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions9.8v3.10.5%2025-09-19
CVE-2025-34205Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code enables RCE9.8v3.11.4%2025-09-19Fix
CVE-2025-34204Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances9.8v3.10.7%2025-09-19
CVE-2025-34203Vasion Print Use of Outdated, End-Of-Life, and vulnerable Third-Party components9.8v3.10.9%2025-09-19Fix
CVE-2025-34202Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN8.8v3.11.0%2025-09-19Fix
CVE-2025-34201Vasion Print (formerly PrinterLogic) lack of Network Segmentation Between Docker Instances7.8v3.10.3%2025-09-19
CVE-2025-34200Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext7.8v3.10.3%2025-09-19
CVE-2025-34199Vasion Print (formerly PrinterLogic) Insecure SSL Verification allows man-in-the-middle Attacks8.1NVD v3.10.5%2025-09-19Fix
CVE-2025-34198Vasion Print (formerly PrinterLogic) Shared / Hard-coded SSH Host Private Keys in Appliance Image9.8v3.10.8%2025-09-19Fix
CVE-2025-34197Vasion Print Undocumented Local Account with hard-coded password and Passwordless sudo7.8v3.10.3%2025-09-19Fix
CVE-2025-34195Vasion Print unquoted path during Driver Installation leads to Execution of C:\Program.exe9.8v3.11.0%2025-09-19Fix
CVE-2025-34194Vasion Print (formerly PrinterLogic) local privilege escalation via insecure temporary file Handling7.8v3.10.3%2025-09-19Fix
CVE-2025-34193Vasion Print Insecure Windows components lack Modern Memory Protections and Use Outdated Runtimes9.8v3.10.8%2025-09-19Fix
CVE-2025-34192Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version9.8v3.11.0%2025-09-19Fix
CVE-2025-34191Vasion Print (formerly PrinterLogic) arbitrary file write as Root via Response Path Symlink Follow8.4v3.10.3%2025-09-19Fix
CVE-2025-34190Vasion Print PrinterInstallerClientService authentication bypass7.8v3.10.4%2025-09-19Fix
CVE-2025-34189Vasion Print Insecure Inter-Process Communication allows Local session hijacking7.8v3.10.2%2025-09-19Fix
CVE-2025-34188Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions7.8v3.10.3%2025-09-19Fix
CVE-2025-30755Oracle OpenGrok cross-site scripting6.1CNA v3.10.2%2025-09-19Fix
CVE-2025-26517Privilege escalation vulnerability in StorageGRID (formerly StorageGRID Webscale)5.4CNA v3.10.2%2025-09-19Fix
CVE-2025-26516Denial of service vulnerability in StorageGRID (formerly StorageGRID Webscale)5.3CNA v3.10.4%2025-09-19Fix
CVE-2025-26515Server-side request forgery vulnerability in StorageGRID (formerly StorageGRID Webscale)7.5CNA v3.10.3%2025-09-19Fix
CVE-2025-26514Reflected cross-site scripting vulnerability in StorageGRID (formerly StorageGRID Webscale)6.4CNA v3.10.2%2025-09-19Fix
CVE-2025-10722SKTLab Mukbee App AndroidManifest.xml vulnerability4.8CNA v4.00.1%2025-09-19
CVE-2025-10721Webull Investing and Trading App AndroidManifest.xml vulnerability4.8CNA v4.00.1%2025-09-19
CVE-2025-10719WisdomGarden｜Tronclass insecure direct object reference5.3CNA v4.00.3%2025-09-19Fix
CVE-2025-10718Ooma Office Business Phone App com.Ooma.office2 improper export of android application components4.8CNA v4.00.1%2025-09-19
CVE-2025-10717intsig CamScanner App AndroidManifest.xml vulnerability4.8CNA v4.00.1%2025-09-19
CVE-2025-10716Creality Cloud App AndroidManifest.xml vulnerability4.8CNA v4.00.1%2025-09-19
CVE-2025-10715APEUni PTE Exam Practice App AndroidManifest.xml improper export of android application components4.8CNA v4.00.1%2025-09-19
CVE-2025-1071207FLYCMS/07FLY-CMS/07FlyCRM login SQL injection6.9CNA v4.00.3%2025-09-19
CVE-2025-1071107FLYCMS/07FLY-CMS/07FlyCRM login cross-site scripting5.3CNA v4.00.4%2025-09-19
CVE-2025-1071007FLYCMS/07FLY-CMS/07FlyCRM index.php cross-site scripting5.3CNA v4.00.4%2025-09-19
CVE-2025-10709Four-Faith Water Conservancy Informatization Platform historyDownload.do path traversal7.5NVD v3.11.0%2025-09-19
CVE-2025-10708Four-Faith Water Conservancy Informatization Platform historyDownload.do;usrlogout.do path traversal7.5v3.11.0%2025-09-19
CVE-2025-10707JeecgBoot sendMsg improper authorization8.8v3.10.4%2025-09-19
CVE-2025-10690Goza - Nonprofit Charity WordPress theme missing authorization unauthenticated arbitrary file upload9.8CNA v3.10.8%2025-09-19Fix
CVE-2025-10647Embed PDF for WPForms WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.9%2025-09-19Fix
CVE-2025-10630Regex DoS in Grafana Zabbix plugin4.3CNA v3.10.3%2025-09-19Fix
CVE-2025-10568HyperX Ngenuity arbitrary code execution5.2CNA v4.00.3%2025-09-19Fix
CVE-2025-10468Path traversal in Beyaz Computer's CityPLus7.5CNA v3.10.4%2025-09-19Fix
CVE-2025-10458zephyrproject-rtos Zephyr bluetooth: Le_conn_rsp does not sanitize CID, MTU, MPS values7.6CNA v3.10.2%2025-09-19Fix
CVE-2025-10457zephyrproject-rtos Zephyr bluetooth: Out-Of-Context le_conn_rsp Handling4.3CNA v3.10.4%2025-09-19
CVE-2025-10456Zephyr Bluetooth Low Energy stack integer overflow7.1CNA v3.10.2%2025-09-19Fix
CVE-2025-10146Download Manager WordPress plugin reflected cross-site scripting via `user_ids` parameter6.1CNA v3.10.2%2025-09-19Fix
CVE-2025-9969Reflected XSS in Vizly Web Design's Real Estate Packages7.1CNA v3.10.3%2025-09-19Fix
CVE-2025-9906Arbitrary code execution in Keras Safe Mode8.6CNA v4.00.2%2025-09-19Fix
CVE-2025-9905Arbitary code execution in Keras load_model7.3CNA v4.00.2%2025-09-19Fix
CVE-2025-9081Mattermost IDOR in board file download allows any user to download any file by UUID3.1CNA v3.10.3%2025-09-19Fix
CVE-2025-9079Mattermost admin RCE via prepackaged plugins by way of misconfigured imports directory8.0CNA v3.10.6%2025-09-19Fix
CVE-2025-8664XSS in Saysis Computer Systems' StarCities6.3CNA v3.10.2%2025-09-19Fix
CVE-2025-8532IDOR in Bimser's eBA Document and Workflow Management System6.4CNA v3.10.1%2025-09-19Fix
CVE-2025-8531Mitsubishi Electric MELSEC-Q Series Q03UDVCPU improper length parameter handling6.8CNA v3.11.0%2025-09-19Fix
CVE-2025-8487extendthemes Kubio AI Page Builder image hub installer missing authorization5.4CNA v3.10.3%2025-09-19Fix
CVE-2025-7937SMCI MBD-X12STW supermicro BMC firmware update validation bypass7.2CNA v3.10.3%2025-09-19
CVE-2025-7702Open redirect in PUSULA's Manageable Email Sending System4.7CNA v3.10.2%2025-09-19Fix
CVE-2025-7665Miniorange OTP Verification with Firebase - unauthenticated privilege escalation8.1CNA v3.10.4%2025-09-19Fix
CVE-2025-7403zephyrproject-rtos Zephyr bluetooth: Bt_conn_tx_processor unsafe handling7.6CNA v3.10.2%2025-09-19Fix
CVE-2025-6198SMCI X13SEM-F supermicro BMC firmware update validation bypass7.2CNA v3.10.3%2025-09-19
CVE-2025-5955Service Finder SMS System WordPress plugin authentication bypass8.1CNA v3.10.4%2025-09-19
CVE-2025-5948Service Finder Bookings WordPress plugin unauthenticated privilege escalation via claim_business9.8CNA v3.10.4%2025-09-19
CVE-2025-59692PureVPN incorrect resource transfer3.7CNA v3.10.2%2025-09-18
CVE-2025-59691PureVPN incorrect resource transfer3.7CNA v3.10.2%2025-09-18
CVE-2025-59424LinkAce vulnerable to stored XSS on the Audit page7.3CNA v3.10.3%2025-09-18Exploit codeFix
CVE-2025-59421Press vulnerable to email flooding to users due to lack of validation and rate limits2.7CNA v4.00.4%2025-09-18
CVE-2025-59417lobehub lobe-chat lobe Chat Desktop vulnerable to remote code execution via XSS in Chat messages6.8CNA v4.00.4%2025-09-18Fix
CVE-2025-59220Microsoft Windows Bluetooth service elevation of privilege7.0CNA v3.10.2%2025-09-18Fix
CVE-2025-59216Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.2%2025-09-18Fix
CVE-2025-59215Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.3%2025-09-18Fix
CVE-2025-59040Tuleap backlog item representations do not verify the permissions of the child trackers4.3CNA v3.10.3%2025-09-18Fix
CVE-2025-57452Realme Clone Phone cross-site scripting6.1CISA ADP v3.10.3%2025-09-18
CVE-2025-57295H3C Magic NX15 insecure default initialization8.0CISA ADP v3.10.4%2025-09-18
CVE-2025-57293Comfast Cf-xr11 Firmware command injection8.8CISA ADP v3.11.7%2025-09-18
CVE-2025-55912Oxygenz ClipBucket unrestricted file upload7.3CISA ADP v3.11.5%2025-09-18Exploit codeFix
CVE-2025-55911Oxygenz ClipBucket command injection6.5CISA ADP v3.11.1%2025-09-18Exploit code
CVE-2025-55068Dover Fueling Solutions ProGauge MagLink LX4 Devices integer overflow or wraparound8.8CNA v4.00.4%2025-09-18Fix
CVE-2025-54860Cognex In-Sight Explorer missing brute-force protection6.9CNA v4.00.1%2025-09-18Fix
CVE-2025-54818Cognex In-Sight Explorer cleartext transmission of sensitive information8.6CNA v4.00.1%2025-09-18Fix
CVE-2025-54810Cognex In-Sight Explorer and In-Sight Camera firmware authentication bypass by capture-replay8.6CNA v4.00.2%2025-09-18Fix
CVE-2025-54807Dover Fueling Solutions ProGauge MagLink LX 4 Devices use of hard-coded cryptographic key9.3CNA v4.00.7%2025-09-18Fix
CVE-2025-54754Cognex In-Sight Explorer and In-Sight Camera firmware use of hard-coded password8.6CNA v4.00.2%2025-09-18Fix
CVE-2025-54497Cognex In-Sight Explorer incorrect permission assignment7.2CNA v4.00.3%2025-09-18Fix
CVE-2025-53969Cognex In-Sight Explorer client-side enforcement of server-side security8.6CNA v4.00.4%2025-09-18Fix
CVE-2025-53947Cognex In-Sight Explorer and In-Sight Camera firmware incorrect default permissions6.9CNA v4.00.1%2025-09-18Fix
CVE-2025-52873Cognex In-Sight Explorer incorrect permission assignment7.2CNA v4.00.3%2025-09-18Fix
CVE-2025-50255Smartvista BackOffice SmartVista Suite cross-site request forgery7.8CNA v3.10.1%2025-09-18
CVE-2025-47906Unexpected paths returned from LookPath in os/exec6.5CISA ADP v3.10.6%2025-09-18Fix
CVE-2025-47698Cognex In-Sight 2000 series cleartext transmission of sensitive information8.6CNA v4.00.1%2025-09-18Fix
CVE-2025-40678Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado5.3CNA v4.00.3%2025-09-18
CVE-2025-40677SQL injection vulnerability in Summar Software´s Portal del Empleado8.7CNA v4.00.6%2025-09-18Exploit code
CVE-2025-36146IBM watsonx.data information disclosure4.3CNA v3.10.2%2025-09-18Fix
CVE-2025-36143IBM watsonx.data command execution4.7CNA v3.10.3%2025-09-18Fix
CVE-2025-36139IBM watsonx.data cross-site scripting5.5CNA v3.10.2%2025-09-18Fix
CVE-2025-30519Dover Fueling Solutions ProGauge MagLink LX4 Devices use of weak credentials9.3CNA v4.00.4%2025-09-18Fix
CVE-2025-30187Denial of service via crafted DoH exchange in PowerDNS DNSdist3.7CNA v3.10.3%2025-09-18Fix
CVE-2025-26503Wind River Systems VxWorks 7 buffer manipulation6.7CNA v3.10.1%2025-09-18Fix
CVE-2025-10689D-Link DIR-645 soap.cgi soapcgi_main command injection9.8v3.14.6%2025-09-18
CVE-2025-10688SourceCodester Pet Grooming Management Software paid.php SQL injection9.8v3.10.5%2025-09-18
CVE-2025-10687SourceCodester Responsive E-Learning System add_teacher.php SQL injection9.8v3.10.5%2025-09-18
CVE-2025-10676fuyang_lipengjun platform queryAll BrandController improper authorization5.3CNA v4.00.4%2025-09-18
CVE-2025-10675fuyang_lipengjun platform queryAll AttributeController improper authorization5.3CNA v4.00.4%2025-09-18
CVE-2025-10674fuyang_lipengjun platform queryAll AttributeCategoryController improper authorization5.3CNA v4.00.4%2025-09-18
CVE-2025-10673itsourcecode Student Information Management System index.php SQL injection9.8v3.10.6%2025-09-18
CVE-2025-10672whuan132 AIBattery com.collweb.AIBatteryHelper BatteryXPCService.swift missing authentication8.5CNA v4.00.2%2025-09-18
CVE-2025-10671youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values6.3CNA v4.00.4%2025-09-18
CVE-2025-10670itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php SQL injection9.8v3.10.4%2025-09-18
CVE-2025-10669Airsonic-Advanced Playlist upload unrestricted upload5.3CNA v4.00.3%2025-09-18
CVE-2025-10668itsourcecode Online Discussion Forum compose_msg_admin.php SQL injection9.8v3.10.4%2025-09-18
CVE-2025-10667itsourcecode Online Discussion Forum compose_msg.php SQL injection9.8v3.10.5%2025-09-18
CVE-2025-10666D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow9.8NVD v3.13.3%2025-09-18Emerging ThreatsExploit code
CVE-2025-10665kidaze CourseSelectionSystem COUNT3s3.php SQL injection9.8v3.10.4%2025-09-18
CVE-2025-10664PHPGurukul Small CRM create-ticket.php SQL injection9.8v3.10.4%2025-09-18
CVE-2025-10663PHPGurukul Online Course Registration my-profile.php SQL injection9.8v3.10.4%2025-09-18
CVE-2025-10662SeaCMS admin_members.php SQL injection9.8v3.10.4%2025-09-18
CVE-2025-10650SoftIron HyperCloud SSH key handling privilege escalation1.8CNA v4.00.1%2025-09-18Fix
CVE-2025-10642wangchenyi1996 chat_forum q.php cross-site scripting5.1CNA v4.00.3%2025-09-18
CVE-2025-10634D-Link DIR-823X Environment variable goahead sub_412E7C command injection8.8NVD v3.17.4%2025-09-18Emerging Threats
CVE-2025-10632itsourcecode Online Pet Shop Management System availableframe.php cross-site scripting5.4v3.10.3%2025-09-18
CVE-2025-10631itsourcecode Online Petshop Management System Available Products addcnp.php cross-site scripting5.4v3.10.3%2025-09-18
CVE-2025-10629D-Link DIR-852 Simple Service Discovery protocol service cgibin ssdpcgi_main command injection8.8v3.15.4%2025-09-18Emerging Threats
CVE-2025-10628D-Link DIR-852 Web Management hedwig.cgi command injection8.8v3.18.8%2025-09-18Emerging Threats
CVE-2025-10627SourceCodester Online Exam Form Submission delete_user.php SQL injection8.8v3.10.3%2025-09-18
CVE-2025-10626SourceCodester Online Exam Form Submission update_s3.php SQL injection8.8v3.10.3%2025-09-18
CVE-2025-10493Chained Quiz WordPress plugin unauthenticated insecure direct object reference via Cookie5.3CNA v3.10.9%2025-09-18Exploit codeFix
CVE-2025-10207ABB FLXEON authenticated File Disclosure/Delete7.5CNA v4.00.4%2025-09-18Fix
CVE-2025-10035Fortra GoAnywhere MFT deserialization of untrusted data10.0CNA v3.199.8%2025-09-18KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-9992Ghost Kit WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-18Fix
CVE-2025-9083Ninja Forms form field PHP object injection9.8CISA ADP v3.10.5%2025-09-18Fix
CVE-2025-8942WP Hotel Booking WordPress plugin Subscriber+ Rating manipulation9.1CISA ADP v3.10.3%2025-09-18Fix
CVE-2025-8565WP Legal Pages GDPR plugin installer missing authorization8.1CNA v3.10.3%2025-09-18Fix
CVE-2025-6237Path traversal and arbitrary file deletion in invoke-ai/invokeai9.8CNA v3.00.4%2025-09-18Fix
CVE-2025-5305Password Reset with Code WordPress plugin insecure password reset code creation9.8CISA ADP v3.10.2%2025-09-18Fix
CVE-2025-4444Tor Onion Service Descriptor resource consumption6.3CNA v4.00.5%2025-09-18Fix
CVE-2025-0547XSS in Mikrogrup's Bizmu4.7CNA v3.10.2%2025-09-18
CVE-2025-59518LemonLDAP::NG OS command injection8.0CNA v3.11.2%2025-09-17Fix
CVE-2025-59476Jenkins has a log message injection5.3CISA ADP v3.10.4%2025-09-17Fix
CVE-2025-59475Jenkins is missing a permission check in the authenticated users' profile menu4.3CISA ADP v3.10.5%2025-09-17Fix
CVE-2025-59474Jenkins has a missing permission check, allowing users to obtain agent names5.3CISA ADP v3.14.9%2025-09-17NucleiFix
CVE-2025-59458JetBrains Junie command injection8.3CNA v3.10.5%2025-09-17Fix
CVE-2025-59457JetBrains TeamCity permissive allowlist7.7CNA v3.10.8%2025-09-17Fix
CVE-2025-59456JetBrains TeamCity relative path traversal5.5CNA v3.113.6%2025-09-17Fix
CVE-2025-59455JetBrains TeamCity race condition4.2CNA v3.10.4%2025-09-17Fix
CVE-2025-59416The-Scratch-Channel tsc-web-client the Scratch Channel forks can publish articles7.2CNA v4.00.3%2025-09-17Fix
CVE-2025-59415Frappe Learning vulnerable to Malicious Content upload via Profile bio field4.6CNA v3.10.2%2025-09-17Fix
CVE-2025-59414Nuxt Client-Side path traversal in Nuxt Island Payload Revival3.1CNA v3.10.4%2025-09-17Fix
CVE-2025-59410Dragonfly tiny file download uses hard coded HTTP protocol5.5CNA v4.00.1%2025-09-17Fix
CVE-2025-59354Dragonfly has weak integrity checks for downloaded files5.5CNA v4.00.2%2025-09-17Fix
CVE-2025-59353dragonflyoss dragonfly manager generates mTLS certificates for arbitrary IP addresses7.7CNA v4.00.2%2025-09-17Fix
CVE-2025-59352Dragonfly allows arbitrary file read and write on a peer machine6.9CNA v4.00.7%2025-09-17Fix
CVE-2025-59351Linux Foundation Dragonfly null pointer dereference2.7CNA v4.00.3%2025-09-17Fix
CVE-2025-59350dragonflyoss dragonfly timing attacks against Proxy’s basic authentication are possible2.7CNA v4.00.3%2025-09-17Fix
CVE-2025-59349dragonflyoss dragonfly directories created via os.MkdirAll are not checked for permissions2.0CNA v4.00.1%2025-09-17Fix
CVE-2025-59348Dragonfly incorrectly handles a task structure’s usedTraffic field5.5CNA v4.00.4%2025-09-17Fix
CVE-2025-59347Dragonfly Manager makes requests to external endpoints with disabled TLS authentication2.7CNA v4.00.2%2025-09-17Fix
CVE-2025-59346Dragonfly server-side request forgery5.5CNA v4.00.2%2025-09-17Fix
CVE-2025-59345Dragonfly did not enable authentication for some Manager’s endpoints7.7CNA v4.00.4%2025-09-17Fix
CVE-2025-59342esm.sh writes arbitrary files via path traversal in `X-Zone-Id` header5.5CNA v4.03.0%2025-09-17NucleiExploit codeFix
CVE-2025-59341Local file inclusion in esm.sh7.7CNA v4.01.6%2025-09-17Nuclei
CVE-2025-59340jinjava sandbox bypass via JavaType-based deserialization9.8CNA v3.12.1%2025-09-17Fix
CVE-2025-59339OVH The Bastion osh-encrypt-rsync script missing cryptographic step4.4CNA v3.10.1%2025-09-17Fix
CVE-2025-59307Century RAID Manager unquoted search path8.4CNA v4.00.2%2025-09-17
CVE-2025-59304swetrix A path traversal9.8CISA ADP v3.13.5%2025-09-17
CVE-2025-58767REXML has a DoS condition when parsing malformed XML file1.2CNA v4.00.2%2025-09-17Fix
CVE-2025-58766Dyad vulnerable to remote code execution via Top-level Navigation in Preview window9.1CNA v3.10.4%2025-09-17Fix
CVE-2025-58432ZimaOS privilege escalation using localhost calls to File API upload5.2CNA v4.00.2%2025-09-17
CVE-2025-58431ZimaOS reads arbitrary files using localhost calls to File API Download4.8CNA v4.00.2%2025-09-17
CVE-2025-58116I-O DATA DEVICE WN-7D36QR OS command improper neutralization8.6CNA v4.01.1%2025-09-17
CVE-2025-57055WonderCMS server-side request forgery6.5CISA ADP v3.10.4%2025-09-17
CVE-2025-56648Parcel has an origin validation error6.5CISA ADP v3.10.2%2025-09-17Fix
CVE-2025-55904Open5GS null pointer dereference4.0CISA ADP v3.10.2%2025-09-17
CVE-2025-55075I-O DATA DEVICE WN-7D36QR/UE WN-7D36QR and hidden functionality6.9CNA v4.00.3%2025-09-17
CVE-2025-54467NeuVector process with sensitive arguments lead to leakage5.3CNA v3.10.3%2025-09-17Fix
CVE-2025-54390ResetPasswordRequest operation of Zimbra Collaboration cross-site request forgery6.3CISA ADP v3.10.2%2025-09-17Fix
CVE-2025-53884NeuVector has an insecure password storage vulnerable to rainbow attack5.3CNA v3.10.2%2025-09-17Fix
CVE-2025-50709Perplexity AI Perplexity GET request parameter information disclosure4.3CISA ADP v3.10.3%2025-09-17
CVE-2025-40933Apache::AuthAny::Cookie for Perl generates session ids insecurely7.5CISA ADP v3.10.4%2025-09-17
CVE-2025-37122HPE Aruba Networking ClearPass Policy Manager unauthenticated reflected cross-site scripting6.1CNA v3.10.3%2025-09-17
CVE-2025-35436CISA Thorium account verification email error handling7.5v3.10.6%2025-09-17Fix
CVE-2025-35435CISA Thorium download stream divide by zero5.3CNA v4.00.4%2025-09-17Fix
CVE-2025-35434CISA Thorium does not validate TLS connections to Elasticsearch9.8v3.10.2%2025-09-17Fix
CVE-2025-35433CISA Thorium does not properly invalidate previously used tokens8.8v3.10.3%2025-09-17Fix
CVE-2025-35432CISA Thorium does not rate limit account verification email messages7.5v3.10.6%2025-09-17Fix
CVE-2025-35431CISA Thorium LDAP injection5.3CNA v4.00.3%2025-09-17Fix
CVE-2025-35430CISA Thorium insecure downloaded file path validation6.5v3.10.5%2025-09-17Fix
CVE-2025-23337NVIDIA HGX GB200 code execution6.7CNA v3.10.2%2025-09-17Fix
CVE-2025-23336NVIDIA Triton Inference Server denial of service4.4CNA v3.10.3%2025-09-17Fix
CVE-2025-23329NVIDIA Triton Inference Server memory corruption7.5CNA v3.10.4%2025-09-17Fix
CVE-2025-23328NVIDIA Triton Inference Server out-of-bounds write7.5CNA v3.10.4%2025-09-17Fix
CVE-2025-23316NVIDIA Triton Inference Server OS command injection9.8CNA v3.10.7%2025-09-17Fix
CVE-2025-23268NVIDIA Triton Inference Server improper input validation8.0CNA v3.10.5%2025-09-17Fix
CVE-2025-10644Wondershare Repairit SAS Token incorrect permission assignment authentication bypass9.4CNA v3.03.0%2025-09-17
CVE-2025-10643Wondershare Repairit incorrect permission assignment authentication bypass9.1CNA v3.02.8%2025-09-17
CVE-2025-10625SourceCodester Online Exam Form Submission dashboard.php SQL injection8.8v3.10.3%2025-09-17
CVE-2025-10624PHPGurukul User Management System login.php SQL injection9.8v3.10.5%2025-09-17
CVE-2025-10623SourceCodester Hotel Reservation System deleteuser.php SQL injection9.8v3.10.5%2025-09-17
CVE-2025-10621SourceCodester Hotel Reservation System editroomimage.php SQL injection9.8v3.10.5%2025-09-17
CVE-2025-10620itsourcecode Online Clinic Management System editp2.php SQL injection8.8v3.10.4%2025-09-17
CVE-2025-10619@sequa-ai/sequa-mcp has command injection5.3CNA v4.01.6%2025-09-17Fix
CVE-2025-10618itsourcecode Online Clinic Management System transact.php SQL injection8.8v3.10.5%2025-09-17
CVE-2025-10617SourceCodester Online Polling System positions.php SQL injection8.8v3.10.4%2025-09-17
CVE-2025-10616itsourcecode E-Commerce Website users.php unrestricted upload8.8v3.10.5%2025-09-17
CVE-2025-10615itsourcecode E-Commerce Website products.php unrestricted upload8.8v3.10.4%2025-09-17
CVE-2025-10614itsourcecode E-Logbook with Health Monitoring System for COVID-19 cross-site scripting6.1v3.10.4%2025-09-17
CVE-2025-10613itsourcecode Student Information System leveledit1.php SQL injection8.8v3.10.3%2025-09-17
CVE-2025-10608Portabilis i-Educar enrollment-history access control8.8v3.10.4%2025-09-17
CVE-2025-10607Portabilis i-Educar diarioApi information disclosure6.5v3.10.4%2025-09-17
CVE-2025-10606Portabilis i-Educar ConfiguracaoMovimentoGeral cross-site scripting6.1v3.10.4%2025-09-17
CVE-2025-10605Portabilis i-Educar agenda_preferencias.php cross-site scripting6.1v3.10.4%2025-09-17
CVE-2025-10604PHPGurukul Online Discussion Forum edit_member.php SQL injection9.8v3.10.4%2025-09-17
CVE-2025-10603PHPGurukul Online Discussion Forum search_result.php SQL injection9.8v3.10.4%2025-09-17
CVE-2025-10602SourceCodester Online Exam Form Submission delete_s1.php SQL injection8.8v3.10.3%2025-09-17
CVE-2025-10601SourceCodester Online Exam Form Submission index.php SQL injection9.8v3.10.4%2025-09-17
CVE-2025-10600SourceCodester Online Exam Form Submission register.php unrestricted upload9.8v3.10.5%2025-09-17
CVE-2025-10599itsourcecode Web-Based Internet Laboratory Management System login.php SQL injection9.8v3.10.5%2025-09-17
CVE-2025-10598SourceCodester Pet Grooming Management Software search_product.php SQL injection9.8v3.10.4%2025-09-17
CVE-2025-10597kidaze CourseSelectionSystem COUNT2.php SQL injection9.8v3.10.5%2025-09-17
CVE-2025-10596SourceCodester Online Exam Form Submission index.php SQL injection9.8v3.10.5%2025-09-17
CVE-2025-10595SourceCodester Online Student File Management System delete_user.php SQL injection8.8v3.10.4%2025-09-17
CVE-2025-10594SourceCodester Online Student File Management System delete_student.php SQL injection8.8v3.10.3%2025-09-17
CVE-2025-10593SourceCodester Online Student File Management System update_student.php SQL injection8.8v3.10.3%2025-09-17
CVE-2025-10592itsourcecode Online Public Access Catalog OPAC POST parameter mysearch.php SQL injection8.8v3.10.4%2025-09-17
CVE-2025-10591Portabilis i-Educar Editar Função educar_funcao_cad.php cross-site scripting5.4v3.10.2%2025-09-17
CVE-2025-10590Portabilis i-Educar educar_usuario_det.php cross-site scripting6.1v3.10.3%2025-09-17
CVE-2025-10589N-Partner｜N-Reporter, N-Cloud, N-Probe OS command injection8.7CNA v4.01.0%2025-09-17Fix
CVE-2025-10584Portabilis i-Educar educar_calendario_anotacao_cad.php cross-site scripting5.4v3.10.3%2025-09-17
CVE-2025-10439SQLi in Yordam Library Automation System9.8CNA v3.10.4%2025-09-17Fix
CVE-2025-10205ABB FLXEON Predictable Salt and weak hashing Algorithm8.7CNA v4.00.2%2025-09-17Fix
CVE-2025-10188The Hack Repair Guy's Plugin Archiver WordPress plugin cross-site request forgery5.4CNA v3.10.1%2025-09-17Fix
CVE-2025-10166Social Media Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-17Fix
CVE-2025-10157PickleScan Bypasses Unsafe Globals Check using Submodule Imports7.8NVD v3.10.8%2025-09-17Fix
CVE-2025-10156PickleScan Security Bypass via Bad CRC in ZIP Archive9.8NVD v3.11.5%2025-09-17Fix
CVE-2025-10155PickleScan Security Bypass using Misleading file extension7.8NVD v3.10.8%2025-09-17Fix
CVE-2025-10143Catch Dark Mode WordPress plugin authenticated (Contributor+) local file inclusion7.5CNA v3.10.6%2025-09-17Fix
CVE-2025-10125Memberlite Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-09-17Fix
CVE-2025-10058WP Import Ultimate CSV XML Importer for WordPress plugin arbitrary file deletion8.1CNA v3.10.6%2025-09-17Fix
CVE-2025-10057WP Import Ultimate CSV XML Importer for WordPress - Authenticated remote code execution8.8CNA v3.10.7%2025-09-17Fix
CVE-2025-10050Developer Loggers for Simple History WordPress plugin authenticated (Admin+) local file inclusion6.6CNA v3.10.8%2025-09-17Fix
CVE-2025-10042Quiz Maker WordPress plugin unauthenticated SQL injection7.5v3.10.9%2025-09-17Exploit codeFix
CVE-2025-9972PLANET Technology｜Industrial Cellular Gateway OS command injection9.3CNA v4.02.2%2025-09-17Fix
CVE-2025-9971PLANET Technology｜Industrial Cellular Gateway missing authentication9.3CNA v4.00.8%2025-09-17Fix
CVE-2025-9891User Sync Remote User Sync WordPress plugin cross-site request forgery to plugin deactivation4.3CNA v3.10.2%2025-09-17Fix
CVE-2025-9862Ghost SSRF via oEmbed Bookmark6.5v3.10.5%2025-09-17Fix
CVE-2025-9851Appointmind WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-17Fix
CVE-2025-9818OMRON SOCIAL SOLUTIONS PowerAttendant Standard Edition unquoted search path6.7CNA v3.10.1%2025-09-17
CVE-2025-9629USS Upyun WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-17Fix
CVE-2025-9565Blocksy Companion WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-17Fix
CVE-2025-9450Dassault Systèmes SOLIDWORKS eDrawings JT file reader uninitialized variable use7.8CNA v3.10.2%2025-09-17
CVE-2025-9449Dassault Systèmes SOLIDWORKS eDrawings PAR file reader use-after-free7.8CNA v3.10.2%2025-09-17
CVE-2025-9447Dassault Systèmes SOLIDWORKS eDrawings PAR file reader out-of-bounds read7.8CNA v3.10.2%2025-09-17
CVE-2025-9242WatchGuard Firebox out-of-bounds write9.3CNA v4.091.3%2025-09-17KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-9216kodezen StoreEngine import function arbitrary file upload8.8CNA v3.10.9%2025-09-17Exploit codeFix
CVE-2025-9215StoreEngine WordPress plugin path traversal6.5CNA v3.10.6%2025-09-17Exploit codeFix
CVE-2025-9203Media Player Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-17Fix
CVE-2025-8999Sydney WordPress theme missing authorization authenticated limited theme options update5.3CNA v3.10.3%2025-09-17Fix
CVE-2025-8463IDOR in SecHard Information Technologies' SecHard5.3CNA v3.10.3%2025-09-17Fix
CVE-2025-8411XSS in Dokuzsoft Technology's E-Commerce Web Design Product7.1CNA v3.10.2%2025-09-17Fix
CVE-2025-8394Productive Style WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-17Fix
CVE-2025-8153NEC UNIVERGE IX NEC Corporation cross-site scripting5.1CNA v4.00.3%2025-09-17
CVE-2025-8077NeuVector admin account has insecure default password9.8CNA v3.10.6%2025-09-17Fix
CVE-2025-8006Ashlar-Vellum Cobalt XE File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-8005Ashlar-Vellum Cobalt XE File Parsing type confusion remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-8004Ashlar-Vellum Cobalt XE File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-8003Ashlar-Vellum Cobalt CO File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-8002Ashlar-Vellum Cobalt CO File Parsing type confusion remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-8001Ashlar-Vellum Cobalt CO File Parsing memory corruption remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-8000Ashlar-Vellum Cobalt LI File Parsing type confusion remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7999Ashlar-Vellum Cobalt AR File Parsing type confusion remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7998Ashlar-Vellum Cobalt CO File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7997Ashlar-Vellum Cobalt XE File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7996Ashlar-Vellum Cobalt AR File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7995Ashlar-Vellum Cobalt CO File Parsing type confusion remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7994Ashlar-Vellum Cobalt AR File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7993Ashlar-Vellum Cobalt LI File Parsing use-after-free remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7992Ashlar-Vellum Cobalt AR File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7991Ashlar-Vellum Cobalt VC6 File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7990Ashlar-Vellum Cobalt VC6 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7989Ashlar-Vellum Cobalt AR File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7988Ashlar-Vellum Graphite VC6 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7987Ashlar-Vellum Graphite VC6 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7986Ashlar-Vellum Graphite VC6 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7985Ashlar-Vellum Cobalt VC6 File Parsing integer overflow remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7984Ashlar-Vellum Cobalt AR File Parsing uninitialized variable remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7983Ashlar-Vellum Graphite VC6 File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7982Ashlar-Vellum Cobalt LI File Parsing integer overflow remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7981Ashlar-Vellum Graphite VC6 File Parsing uninitialized variable remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7980Ashlar-Vellum Graphite VC6 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7979Ashlar-Vellum Graphite VC6 File Parsing stack-based buffer overflow remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7978Ashlar-Vellum Graphite VC6 File Parsing uninitialized variable remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-7977Ashlar-Vellum Cobalt LI File Parsing out-of-bounds read remote code execution7.8CNA v3.00.2%2025-09-17
CVE-2025-0879XSS in Shopside Software's Shopside App4.7CNA v3.10.2%2025-09-17Fix
CVE-2025-0546XSS in MevzuatTR Software's MevzuatTR4.7CNA v3.10.3%2025-09-17Fix
CVE-2025-0420XSS in Mikrogrup's Paraşüt4.7CNA v3.10.2%2025-09-17
CVE-2025-0419XSS in Mikrogrup's Zirve Nova4.7CNA v3.10.2%2025-09-17
CVE-2025-59453Click Studios Passwordstate incorrect resource transfer3.2CNA v3.10.2%2025-09-16Fix
CVE-2025-59437fedorindutny ip server-side request forgery3.2CNA v3.10.1%2025-09-16
CVE-2025-59436fedorindutny ip server-side request forgery3.2CNA v3.10.1%2025-09-16Fix
CVE-2025-59336Relative path traversal in Luanox6.9CNA v4.00.5%2025-09-16Fix
CVE-2025-59334Linkr allows manifest tampering leading to arbitrary file injection9.7CNA v3.10.4%2025-09-16Fix
CVE-2025-59333@executeautomation/database-server does not properly restrict access, bypassing a read-only mode8.1CNA v3.10.4%2025-09-16
CVE-2025-59270psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse2.3CNA v4.00.2%2025-09-16Fix
CVE-2025-59161Element Web room list improper input validation2.7CNA v4.00.4%2025-09-16Fix
CVE-2025-59160matrix-js-sdk has insufficient validation when considering a room to be upgraded by another2.7CNA v4.00.2%2025-09-16Fix
CVE-2025-59050Greenshot Insecure .NET deserialization via WM_COPYDATA enables local code execution8.4CNA v3.10.3%2025-09-16Fix
CVE-2025-58749WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode2.1CNA v4.00.4%2025-09-16Fix
CVE-2025-58174LAM profile editor stored cross-site scripting4.6CNA v3.10.2%2025-09-16Fix
CVE-2025-57631TDuckCloud Tduck SQL injection9.8CISA ADP v3.10.8%2025-09-16
CVE-2025-57625CYRISMA Sensor Cyrisma_Agent service privilege escalation8.8CISA ADP v3.10.6%2025-09-16
CVE-2025-57624CYRISMA Agent DLL hijacking7.8CISA ADP v3.10.1%2025-09-16
CVE-2025-57145PHPGurukul Auto Taxi Stand Management System cross-site scripting5.4CISA ADP v3.10.2%2025-09-16
CVE-2025-57119PHPGurukul Online Library Management System execution with unnecessary privileges9.8CISA ADP v3.10.6%2025-09-16
CVE-2025-56706Edimax Br-6473ax command injection8.0CISA ADP v3.12.0%2025-09-16Emerging Threats
CVE-2025-56697Askar634 Computer Base Test cross-site scripting6.1CISA ADP v3.10.3%2025-09-16
CVE-2025-56562Signify Wiz Connected missing authentication7.5CISA ADP v3.10.3%2025-09-16
CVE-2025-56557Tuya execution with unnecessary privileges9.1CISA ADP v3.10.3%2025-09-16
CVE-2025-56295Carmelo Computer Laboratory System unrestricted file upload7.3CISA ADP v3.10.3%2025-09-16
CVE-2025-56293Fabian Human Resource Integrated System cross-site scripting5.4CISA ADP v3.10.2%2025-09-16
CVE-2025-56289Fabian Document Management System cross-site scripting5.4CISA ADP v3.10.2%2025-09-16
CVE-2025-56280Carmelo Food Ordering Review System cross-site scripting5.4CISA ADP v3.10.2%2025-09-16
CVE-2025-56276Carmelo Food Ordering Review System cross-site scripting5.4CISA ADP v3.10.2%2025-09-16
CVE-2025-56264Zhyd OneBlog denial of service7.5CISA ADP v3.10.4%2025-09-16
CVE-2025-56263By-night sms unrestricted file upload8.8CISA ADP v3.10.4%2025-09-16
CVE-2025-55834Huayi-tec JEEWMS cross-site scripting6.1CISA ADP v3.10.3%2025-09-16
CVE-2025-55118BMC Control-M/Agent memory corruption in SSL/TLS communication8.4CNA v4.00.4%2025-09-16Fix
CVE-2025-55117BMC Control-M/Agent buffer overflow in SSL/TLS communication6.3CNA v4.00.3%2025-09-16Fix
CVE-2025-55116BMC Control-M/Agent buffer overflow local privilege escalation9.3CNA v4.00.2%2025-09-16Fix
CVE-2025-55115BMC Control-M/Agent path traversal local privilege escalation9.3CNA v4.00.2%2025-09-16Fix
CVE-2025-55114BMC Control-M/Agent improper IP address filtering order6.9CNA v4.00.4%2025-09-16Fix
CVE-2025-55113BMC Control-M/Agent unescaped null byte in access control list checks10.0NVD v3.10.3%2025-09-16Fix
CVE-2025-55112BMC Control-M/Agent hard-coded Blowfish keys7.6CNA v4.00.2%2025-09-16Fix
CVE-2025-55111BMC Control-M/Agent insecure default file permissions5.7CNA v4.00.1%2025-09-16Fix
CVE-2025-55110BMC Control-M/Agent hard-coded default keystore password5.7CNA v4.00.1%2025-09-16Fix
CVE-2025-55109BMC Control-M/Agent default SSL/TLS configuration authenticated bypass9.5CNA v4.00.4%2025-09-16Fix
CVE-2025-54391Zimbra Collaboration 2FA enrollment authentication bypass9.1CISA ADP v3.10.6%2025-09-16Fix
CVE-2025-54262Adobe Substance3D Stager out-of-bounds read7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-54237Adobe Substance3D Stager out-of-bounds read5.5CNA v3.10.2%2025-09-16Fix
CVE-2025-52044frappe erpnext SQL injection7.5CISA ADP v3.10.4%2025-09-16
CVE-2025-49728Microsoft PC Manager security feature bypass4.0CNA v3.10.2%2025-09-16Fix
CVE-2025-47967Microsoft Edge (Chromium-based) for Android spoofing4.7CNA v3.10.4%2025-09-16Fix
CVE-2025-44034aaluoxiang oa_system SQL injection8.0CISA ADP v3.10.5%2025-09-16
CVE-2025-43805Liferay Portal allows remote attackers to view display page templates via crafted URLs6.9CNA v4.00.3%2025-09-16Fix
CVE-2025-43804Liferay search widget vulnerable to cross-site scripting5.1CNA v4.00.2%2025-09-16Fix
CVE-2025-43801Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC6.9CNA v4.00.4%2025-09-16Fix
CVE-2025-41249Spring Framework annotation detection mechanism may result in improper authorization7.5CNA v3.10.5%2025-09-16Fix
CVE-2025-41248Spring Security authorization bypass for method security annotations on parameterized types7.5CNA v3.10.4%2025-09-16Fix
CVE-2025-41243Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux10.0CNA v3.13.5%2025-09-16NucleiEmerging ThreatsExploit codeFix
CVE-2025-39836Linux kernel EFI stmm driver out-of-bounds write7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39835Linux kernel XFS extended attribute code vulnerability7.8v3.10.2%2025-09-16Fix
CVE-2025-39834Linux kernel net/mlx5 memory leak5.5NVD v3.10.1%2025-09-16Fix
CVE-2025-39833Linux kernel hfcpci uninitialized resource use5.5v3.10.1%2025-09-16Fix
CVE-2025-39832Linux kernel mlx5 sync reset handling improper locking5.5v3.10.1%2025-09-16Fix
CVE-2025-39831In the Linux kernel, the following vulnerability has been resolved: fbnic: Move phylink resume out of service_task and into open/close The fbnic driver was presenting with the following locking assert coming out of a PM resume: [ 42.208116][ T164] RTNL: assertion failed at drivers/net/phy/phylink.5.5v3.10.1%2025-09-16Fix
CVE-2025-39830Linux kernel net/mlx5 memory leak5.5NVD v3.10.1%2025-09-16Fix
CVE-2025-39829Linux kernel function graph tracer vulnerability5.5NVD v3.10.1%2025-09-16Fix
CVE-2025-39828Linux kernel ATM TCP driver vulnerability7.8v3.10.2%2025-09-16Fix
CVE-2025-39827Linux kernel ROSE protocol vulnerability8.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39826Linux kernel ROSE protocol use-after-free8.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39825Linux kernel SMB client race condition7.8CNA v3.10.1%2025-09-16Fix
CVE-2025-39824Linux kernel Asus HID driver use-after-free7.8v3.10.2%2025-09-16Fix
CVE-2025-39823Linux kernel KVM x86 guest-controlled index handling improper array index validation7.8v3.10.2%2025-09-16Fix
CVE-2025-39822Linux kernel io_uring provided buffer commit handling vulnerability5.5v3.10.1%2025-09-16Fix
CVE-2025-39821Linux kernel perf events subsystem out-of-bounds write7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39820Linux kernel MSM DPU display driver null pointer dereference5.5v3.10.1%2025-09-16Fix
CVE-2025-39819Linux kernel SMB client compound operation handling resource leak5.5v3.10.1%2025-09-16Fix
CVE-2025-39818Linux kernel intel-thc crash7.8CNA v3.10.1%2025-09-16Fix
CVE-2025-39817Linux kernel efivarfs dentry comparison out-of-bounds read7.1CNA v3.10.2%2025-09-16Fix
CVE-2025-39816Linux kernel io_uring provided buffer ring vulnerability5.5v3.10.1%2025-09-16Fix
CVE-2025-39815Linux kernel RISC-V KVM vector register loading vulnerability7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39814Linux kernel ice null pointer dereference5.5v3.10.1%2025-09-16Fix
CVE-2025-39813Linux kernel ftrace dump reader race condition4.7v3.10.1%2025-09-16Fix
CVE-2025-39812Linux kernel SCTP IPv6 socket binding vulnerability5.5v3.10.2%2025-09-16Fix
CVE-2025-39811Linux kernel drm/xe/vm null pointer dereference5.5v3.10.2%2025-09-16Fix
CVE-2025-39810Linux kernel bnxt_en memory corruption7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39809Linux kernel intel-quicki2c crash8.4CNA v3.10.2%2025-09-16Fix
CVE-2025-39808Linux kernel HID N-Trig touch driver vulnerability5.5v3.10.2%2025-09-16Fix
CVE-2025-39807Linux kernel MediaTek DRM driver null pointer dereference5.5v3.10.2%2025-09-16Fix
CVE-2025-39806Linux kernel HID multitouch driver out-of-bounds read8.8CNA v3.10.2%2025-09-16Fix
CVE-2025-39805Linux kernel macb Ethernet driver vulnerability5.5v3.10.2%2025-09-16Fix
CVE-2025-37131HPE Aruba Networking EdgeConnect SD-WAN Gateway improper access control4.9CNA v3.10.3%2025-09-16
CVE-2025-37130HPE Aruba Networking EdgeConnect SD-WAN Gateway command-line interface information disclosure6.5CNA v3.10.3%2025-09-16
CVE-2025-37129HPE Aruba Networking EdgeConnect SD-WAN Gateway OS command injection6.7CNA v3.10.2%2025-09-16
CVE-2025-37128HPE Aruba Networking EdgeConnect SD-WAN Gateway web API denial of service6.8CNA v3.10.3%2025-09-16
CVE-2025-37127HPE Aruba Networking EdgeConnect SD-WAN Gateway weak cryptographic algorithm7.2CNA v3.10.1%2025-09-16
CVE-2025-37126HPE Aruba Networking EdgeConnect SD-WAN Gateway command-line interface OS command injection7.2CNA v3.10.6%2025-09-16
CVE-2025-37125HPE Aruba Networking EdgeConnect SD-WAN Gateway missing authorization7.5CNA v3.10.4%2025-09-16
CVE-2025-37124Unauthenticated access vulnerability allows Transit Traffic Misrouting in SD-WAN Edge interface8.6CNA v3.10.4%2025-09-16
CVE-2025-37123HPE Aruba Networking EdgeConnect SD-WAN Gateway command-line interface privilege escalation8.8CNA v3.10.5%2025-09-16
CVE-2025-36244IBM AIX privilege escalation7.4CNA v3.10.1%2025-09-16Fix
CVE-2025-34187Ilevia EVE X1/X5 Server.eden Reverse Rootshell8.8NVD v3.13.2%2025-09-16Fix
CVE-2025-34186Ilevia EVE X1/X5 Server.eden authentication bypass9.8v3.10.9%2025-09-16Fix
CVE-2025-34185Ilevia EVE X1 Server.eden Unauthenticated File Disclosure7.5v3.10.8%2025-09-16Fix
CVE-2025-34184Ilevia EVE X1 Server.eden Neuro-Core Unauthenticated code injection9.8v3.12.7%2025-09-16Fix
CVE-2025-34183Ilevia EVE X1 Server.eden credentials leak through Log Disclosure7.5NVD v3.10.7%2025-09-16Fix
CVE-2025-30075Alludo MindManager DLL search path vulnerability2.2CNA v3.10.1%2025-09-16Fix
CVE-2025-26711ZTE T5400 unauthorized access5.7CNA v3.10.3%2025-09-16
CVE-2025-26710ZTE T5400 information disclosure3.5CNA v3.10.2%2025-09-16
CVE-2025-10566Campcodes Grocery Sales and Inventory System index.php cross-site scripting6.1v3.10.4%2025-09-16
CVE-2025-10565Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.4%2025-09-16
CVE-2025-10564Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8NVD v3.10.4%2025-09-16
CVE-2025-10563Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.5%2025-09-16
CVE-2025-10562Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.4%2025-09-16
CVE-2025-10546Cross-site scripting (XSS) vulnerability in PPC XPON ONT Wi-Fi Router5.1CNA v4.00.5%2025-09-16Fix
CVE-2025-10537Mozilla memory safety bugs fixed in Firefox ESR, Thunderbird ESR, Firefox 143 and Thunderbird 1438.8CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10536Mozilla Firefox information disclosure in the Networking: Cache component6.2CISA ADP v3.10.2%2025-09-16Fix
CVE-2025-10535Mozilla information disclosure, mitigation bypass in the Privacy component in Firefox for Android7.5CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10534Mozilla Firefox spoofing issue in the Site Permissions component8.1CISA ADP v3.10.4%2025-09-16Fix
CVE-2025-10533Mozilla Firefox integer overflow in the SVG component8.8CISA ADP v3.10.7%2025-09-16Fix
CVE-2025-10532Mozilla Firefox incorrect boundary conditions in the JavaScript: GC component6.5CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10531Mozilla Firefox Mitigation bypass in the Web Compatibility: Tooling component5.4CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10530Mozilla spoofing issue in the WebAuthn component in Firefox for Android6.5CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10529Mozilla Firefox same-origin policy bypass in the Layout component6.5CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10528Mozilla Firefox and Thunderbird Canvas2D sandbox escape7.3CISA ADP v3.10.4%2025-09-16Fix
CVE-2025-10527Mozilla Firefox sandbox escape due to use-after-free in the Graphics: Canvas2D component7.1CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10492Jaspersoft JasperReports Library deserialization of untrusted data8.7CNA v4.00.9%2025-09-16Fix
CVE-2025-10316Cross-site scripting in extension form to Database (form_to_database)2.3CNA v4.00.3%2025-09-16Fix
CVE-2025-10290Mozilla Focus UI misrepresentation6.5CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-10016Local privilege escalation in Sparkle Autoupdate daemon8.8CNA v4.00.2%2025-09-16Fix
CVE-2025-10015TCC Bypass via Downloader XPC service in Sparkle4.8CNA v4.00.2%2025-09-16Fix
CVE-2025-9808The Events Calendar WordPress plugin information disclosure5.3CNA v3.10.8%2025-09-16NucleiFix
CVE-2025-9708Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain6.8CNA v3.10.3%2025-09-16Fix
CVE-2025-8894Autodesk Revit PDF File Parsing heap-based buffer overflow7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-8893Autodesk Revit PDF File Parsing out-of-bounds write7.8CNA v3.10.2%2025-09-16Fix
CVE-2025-8446Blaze Demo Importer WordPress plugin missing authorization authenticated limited plugin Install4.3CNA v3.10.2%2025-09-16Fix
CVE-2025-8276HTML injection in Patika Global Technologies' HumanSuite9.8CISA ADP v3.10.3%2025-09-16Fix
CVE-2025-8057IDOR in Patika Global Technologies' HumanSuite6.5CNA v3.10.3%2025-09-16Fix
CVE-2025-7744SQLi in Dolusoft's Omaspot9.8CNA v3.10.4%2025-09-16Fix
CVE-2025-7743Sensitive data exposure in Dolusoft's Omaspot9.6CNA v3.10.2%2025-09-16Fix
CVE-2025-7355IDOR in Beefull Energy Technologies' Beefull App6.5CNA v3.10.4%2025-09-16Fix
CVE-2025-6575XSS in Dolusoft's Omaspot6.1v3.10.2%2025-09-16Fix
CVE-2025-5519Information disclosure in ArgusTech's BILGER6.5CNA v3.10.4%2025-09-16Fix
CVE-2025-5518IDOR in ArgusTech's BILGER6.5CNA v3.10.4%2025-09-16Fix
CVE-2025-4953Red Hat Enterprise Linux 8 podman: Build context bind mount7.4CNA v3.10.6%2025-09-16Fix
CVE-2025-4688SQLi in BGS Interactive's SINAV.LINK Exam Result Module9.8CNA v3.10.4%2025-09-16Fix
CVE-2025-2404XSS in UBIT Information Technologies' STOYS4.3CNA v3.10.2%2025-09-16Fix
CVE-2025-59399EVerest libocpp denial of service3.1CNA v3.10.2%2025-09-15Fix
CVE-2025-59398EVerest libocpp denial of service3.1CNA v3.10.2%2025-09-15Fix
CVE-2025-59397Open Web Analytics Server is vulnerable to SQL injection5.0CNA v3.10.4%2025-09-15Fix
CVE-2025-59378GNU Guix incorrect resource transfer5.7CNA v3.10.1%2025-09-15Fix
CVE-2025-59377mcp-kubernetes-server has an OS command injection9.8v3.11.2%2025-09-15
CVE-2025-59376mcp-kubernetes-server has a command injection5.3NVD v3.10.3%2025-09-15Exploit code
CVE-2025-59375libexpat resource exhaustion7.5CNA v3.11.3%2025-09-15Fix
CVE-2025-59361OS command injection in Chaos Mesh via the cleanIptables mutation9.8CNA v3.13.3%2025-09-15Fix
CVE-2025-59360OS command injection in Chaos Mesh via the killProcesses mutation9.8CNA v3.12.8%2025-09-15Fix
CVE-2025-59359OS command injection in Chaos Mesh via the cleanTcs mutation9.8CNA v3.12.9%2025-09-15Fix
CVE-2025-59358Denial of service via unauthorized access to Chaos Mesh debugging server7.5CNA v3.10.8%2025-09-15Fix
CVE-2025-593323DAlloy allows stored XSS through attributes provided to the 3d parser tag/function8.6CNA v3.10.4%2025-09-15
CVE-2025-59331Qix- node-is-arrayish is-arrayish@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59330Qix- node-error-ex error-ex@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59328Apache Fory: Denial of service (DoS) due to deserialization of Untrusted malicious large Data6.5CISA ADP v3.10.7%2025-09-15Fix
CVE-2025-59162color-convert@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59155hackmd-mcp server-side request forgery in HTTP transport mode6.9CNA v4.00.4%2025-09-15Fix
CVE-2025-59154Openfire allows potential identity spoofing via unsafe CN parsing5.9CNA v3.10.2%2025-09-15Fix
CVE-2025-59145color-name@ contains malware after npm account takeover8.8CNA v4.00.6%2025-09-15Fix
CVE-2025-59144debug@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59143color@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59142color-string@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59141Qix- node-simple-swizzle simple-swizzle@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59140Qix- node-backslash backslash@ contains malware after npm account takeover8.8CNA v4.00.4%2025-09-15Fix
CVE-2025-59056FreePBX vulnerable to unauthenticated denial of service6.6CNA v4.00.5%2025-09-15Fix
CVE-2025-58748Dataease H2 data source JDBC URL validation bypass leads to remote code execution8.7CNA v4.00.8%2025-09-15Fix
CVE-2025-58177n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter5.4CNA v3.10.2%2025-09-15Fix
CVE-2025-58172drawnix debug logging cross-site scripting5.3CNA v4.00.5%2025-09-15Fix
CVE-2025-58046Dataease has a JDBC attack vulnerability in the Impala datasource8.7CNA v4.01.4%2025-09-15Fix
CVE-2025-58045Dataease server-side request forgery via unfiltered DB2 JDBC LDAP parameter7.1CNA v4.00.7%2025-09-15Fix
CVE-2025-57248sumatrapdfreader sumatrapdf null pointer dereference7.3CISA ADP v3.10.2%2025-09-15
CVE-2025-57176Ceragon Networks EtherHaul and MultiHaul Series microwave antennas unrestricted file upload4.3CISA ADP v3.10.4%2025-09-15Exploit codeFix
CVE-2025-57174Siklu Communications Etherhaul rfpiped service hard-coded cryptographic key9.8CISA ADP v3.12.2%2025-09-15Exploit code
CVE-2025-57118PHPGurukul Online Library Management System improper privilege management9.8CISA ADP v3.10.6%2025-09-15
CVE-2025-57117Remyandrade Employee Management System Rems' clickjacking5.4CISA ADP v3.10.3%2025-09-15
CVE-2025-57104Zeon Teampel SQL injection5.4CISA ADP v3.10.2%2025-09-15
CVE-2025-56710PHPGurukul Student Result Management System cross-site request forgery7.3CISA ADP v3.10.2%2025-09-15
CVE-2025-56448Positron PX360BT authentication bypass by replay6.8CISA ADP v3.10.3%2025-09-15
CVE-2025-56274Senior-walter Web-based Pharmacy Product Management System improper access control8.1v3.10.4%2025-09-15
CVE-2025-56252Pathinfotech Servitiumcrm cross-site scripting6.1CISA ADP v3.10.2%2025-09-15
CVE-2025-55211FreePBX Post-authenticated command injection6.3CNA v4.00.4%2025-09-15Fix
CVE-2025-52344Explorance Blue input fields cross-site scripting6.1CISA ADP v3.10.3%2025-09-15
CVE-2025-52053TOTOLINK X6000R command injection9.8CISA ADP v3.14.4%2025-09-15
CVE-2025-52048frappe SQL injection6.5CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-50944AVTECH Eagleeyes(lite) improper certificate validation8.8CISA ADP v3.10.3%2025-09-15
CVE-2025-50110AVTECH EagleEyes Lite HTTPS response handling information disclosure8.8CISA ADP v3.10.3%2025-09-15Exploit code
CVE-2025-49089harry0703 MoneyPrinterTurbo path traversal6.3CISA ADP v3.10.3%2025-09-15
CVE-2025-46408AVTECH Eagleeyes(lite) improper certificate host validation9.8CISA ADP v3.10.7%2025-09-15Exploit code
CVE-2025-45091Seafile username field stored cross-site scripting5.4CISA ADP v3.10.2%2025-09-15
CVE-2025-43802Liferay stored cross-site scripting4.8CNA v4.00.3%2025-09-15Fix
CVE-2025-43800Liferay Portal cross-site scripting (XSS)4.8CNA v4.00.2%2025-09-15Fix
CVE-2025-43799Liferay Portal Uses default password6.9CNA v4.00.3%2025-09-15Fix
CVE-2025-43798Liferay DXP missing critical step in authentication2.1CNA v4.00.2%2025-09-15Fix
CVE-2025-43797Liferay has insecure default initialization of Resource issue5.3CNA v4.00.3%2025-09-15Fix
CVE-2025-43794Liferay Portal has stored cross-site scripting (XSS)4.6CNA v4.00.2%2025-09-15Fix
CVE-2025-43793Liferay Portal has improper validation of specified quantity in input6.9CNA v4.00.4%2025-09-15Fix
CVE-2025-43792Liferay Portal has External Control of System or Configuration settings2.3CNA v4.00.3%2025-09-15Fix
CVE-2025-43791Liferay Portal vulnerable to cross-site scripting4.8CNA v4.00.2%2025-09-15Fix
CVE-2025-43375Apple Xcode path handling improper input validation5.5NVD v3.10.3%2025-09-15Fix
CVE-2025-43372Apple macOS improper input validation7.8v3.10.5%2025-09-15Fix
CVE-2025-43371Apple Xcode sandbox escape8.2CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43370Apple Xcode buffer overflow4.0CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43369Apple macOS improper access control5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43368Apple Safari use-after-free4.3CISA ADP v3.10.8%2025-09-15Fix
CVE-2025-43367Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43366Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43362Apple iOS and iPadOS information disclosure9.8CISA ADP v3.11.1%2025-09-15Fix
CVE-2025-43359Apple macOS incorrect control flow9.8CISA ADP v3.10.9%2025-09-15Fix
CVE-2025-43358Apple macOS missing authorization8.8CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43357Apple macOS personal information exposure3.3NVD v3.10.2%2025-09-15Fix
CVE-2025-43356Apple Safari information disclosure6.5CISA ADP v3.10.6%2025-09-15Fix
CVE-2025-43355Apple macOS type confusion5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43354Apple macOS sensitive information in log files5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43353Apple macOS out-of-bounds write5.5v3.10.2%2025-09-15Fix
CVE-2025-43349Apple macOS out-of-bounds write2.8CISA ADP v3.10.5%2025-09-15Fix
CVE-2025-43347Apple macOS improper input validation9.8CISA ADP v3.10.9%2025-09-15Fix
CVE-2025-43346Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43344Apple macOS out-of-bounds read3.3CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43343Apple Safari memory corruption9.8CISA ADP v3.10.8%2025-09-15Fix
CVE-2025-43342Apple Safari improper input validation9.8CISA ADP v3.10.7%2025-09-15Fix
CVE-2025-43341Apple macOS missing authorization7.8CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43340Apple macOS insecure permissions7.8CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43337Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43333Apple macOS improper privilege management7.8CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43332Apple macOS sandbox escape5.2CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43331Apple macOS missing authorization4.0CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43330Apple macOS sandbox escape8.2CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43329Apple macOS missing authorization8.8CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43328Apple macOS insecure permissions3.3CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43327Apple Safari UI misrepresentation6.5CISA ADP v3.10.5%2025-09-15Fix
CVE-2025-43326Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43325Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43321Apple macOS improper access control5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43319Apple macOS improper access control5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43318Apple macOS missing authorization6.2CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43317Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43316Apple macOS missing authorization7.8CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43315Apple macOS improper access control5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43314Apple macOS path traversal5.5CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43312Apple macOS buffer overflow5.5CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43311Apple macOS missing authorization5.1CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43310Apple macOS personal information exposure4.4CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43308Apple macOS information disclosure5.3v3.10.4%2025-09-15Fix
CVE-2025-43307Apple macOS incorrect authorization4.0CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43305Apple macOS logic flaw5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43304Apple macOS race condition7.0CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43303Apple macOS sensitive information in log files5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43302Apple macOS out-of-bounds write5.5CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43301Apple macOS personal information exposure3.3CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43299Apple macOS denial of service5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43298Apple macOS privilege escalation7.8CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43297Apple macOS type confusion6.2CISA ADP v3.10.4%2025-09-15Fix
CVE-2025-43295Apple macOS denial of service5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43294Apple macOS information disclosure3.3CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43293Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43292Apple macOS race condition5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43291Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43287Apple macOS memory corruption7.1CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43286Apple macOS missing authorization7.8CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43285Apple macOS insecure permissions5.5CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43283Apple macOS out-of-bounds read3.3CISA ADP v3.10.4%2025-09-15Fix
CVE-2025-43279Apple macOS personal information exposure6.2CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43272Apple Safari memory corruption6.5CISA ADP v3.11.0%2025-09-15Fix
CVE-2025-43263Apple Xcode improper access control7.1CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43262Apple macOS improperly implemented security check5.1CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43231Apple macOS improper authorization5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43208Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43207Apple macOS improper access control5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43204Apple macOS sandbox escape7.8CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-43203Apple iOS and iPadOS insecure storage of sensitive information4.0CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-43190Apple macOS path traversal5.5CISA ADP v3.10.3%2025-09-15Fix
CVE-2025-41713WAGO: Vulnerability in hardware switch circuit6.5CNA v3.10.4%2025-09-15Fix
CVE-2025-39804Linux kernel ARM64 Poly1305 crypto implementation vulnerability7.5CNA v3.10.3%2025-09-15Fix
CVE-2025-39803Linux kernel UFS host controller driver reachable assertion7.8v3.10.1%2025-09-15Fix
CVE-2025-39802Linux kernel ARM Poly1305 crypto implementation vulnerability7.5CNA v3.10.3%2025-09-15Fix
CVE-2025-39801Linux kernel dwc3 USB controller driver reachable assertion5.5v3.10.1%2025-09-15Fix
CVE-2025-39800Linux kernel Btrfs root cloning vulnerability7.8CNA v3.10.2%2025-09-15Fix
CVE-2025-36082IBM OpenPages information disclosure4.0CNA v3.10.1%2025-09-15Fix
CVE-2025-31271Apple macOS improper authentication7.5CISA ADP v3.10.4%2025-09-15Fix
CVE-2025-31270Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-31269Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-31268Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-31255Apple macOS improper authorization9.8CISA ADP v3.11.6%2025-09-15Fix
CVE-2025-31254Apple Safari incorrect authorization5.4CISA ADP v3.10.5%2025-09-15Fix
CVE-2025-30468Apple iOS and iPadOS weak authentication6.5CISA ADP v3.10.4%2025-09-15Fix
CVE-2025-24197Apple macOS logic flaw5.5CISA ADP v3.10.2%2025-09-15Fix
CVE-2025-24088Apple macOS improper access control7.5CISA ADP v3.10.5%2025-09-15Fix
CVE-2025-10491MongoDB Windows installation MSI may leave ACLs unset on custom installation directories7.8CNA v3.10.1%2025-09-15Fix
CVE-2025-10485pojoin h3blog HTTP header login ppt_log cross-site scripting5.3CNA v4.00.4%2025-09-15
CVE-2025-10483SourceCodester Online Student File Management System save_user.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10482SourceCodester Online Student File Management System index.php SQL injection9.8v3.10.5%2025-09-15
CVE-2025-10481SourceCodester Online Student File Management System remove_file.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10480SourceCodester Online Student File Management System save_file.php unrestricted upload9.8v3.10.3%2025-09-15
CVE-2025-10479SourceCodester Online Student File Management System index.php SQL injection9.8NVD v3.10.4%2025-09-15
CVE-2025-10477kidaze CourseSelectionSystem eligibility.php SQL injection9.8v3.10.3%2025-09-15
CVE-2025-10475SpyShelter IOCTL SpyShelter.sys denial of service6.8CNA v4.00.2%2025-09-15Fix
CVE-2025-10473yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword SQL injection9.8v3.10.4%2025-09-15
CVE-2025-10472harry0703 MoneyPrinterTurbo URL video.py stream_video path traversal7.5v3.10.8%2025-09-15
CVE-2025-10471ZKEACMS MediaController.cs Proxy server-side request forgery8.8v3.10.3%2025-09-15
CVE-2025-10459PHPGurukul Beauty Parlour Management System all-appointment.php SQL injection9.8v3.10.4%2025-09-15
CVE-2025-10453PilotGaea Technologies｜O'View MapServer server-side request forgery6.9CNA v4.00.3%2025-09-15Fix
CVE-2025-10452Gotac｜Statistical Database System missing authentication9.3CNA v4.00.6%2025-09-15Fix
CVE-2025-10448Campcodes Online Job Finder System index.php SQL injection9.8v3.10.5%2025-09-15
CVE-2025-10447Campcodes Online Job Finder System applicationform.php unrestricted upload9.8v3.10.5%2025-09-15
CVE-2025-10446Campcodes Computer Sales and Inventory System cust_searchfrm.php SQL injection9.8v3.10.5%2025-09-15
CVE-2025-10445Campcodes Computer Sales and Inventory System us_transac.php SQL injection9.8v3.10.5%2025-09-15
CVE-2025-10444Campcodes Online Job Finder System advancesearch.php SQL injection9.8v3.10.5%2025-09-15
CVE-2025-10443Tenda AC9/AC15 exeCommand formexeCommand buffer overflow8.7CNA v4.04.2%2025-09-15Emerging Threats
CVE-2025-10442Tenda AC9/AC15 exeCommand formexeCommand os command injection8.8v3.19.4%2025-09-15Emerging Threats
CVE-2025-10441D-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injection5.3CNA v4.013.4%2025-09-15Emerging Threats
CVE-2025-10440D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G os command injection5.3CNA v4.013.4%2025-09-15Emerging Threats
CVE-2025-10436Campcodes Computer Sales and Inventory System sup_searchfrm.php SQL injection9.8v3.10.4%2025-09-15
CVE-2025-10435Campcodes Computer Sales and Inventory System cust_edit1.php SQL injection9.8v3.10.4%2025-09-15
CVE-2025-10434IbuyuCMS Add Article article.php cross-site scripting4.8CNA v4.00.3%2025-09-15
CVE-2025-104331Panel-dev MaxKB debug deserialization5.3CNA v4.00.3%2025-09-15Fix
CVE-2025-10432Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow9.3CNA v4.01.6%2025-09-15Emerging Threats
CVE-2025-10431SourceCodester Pet Grooming Management Software ajax_represent.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10430SourceCodester Pet Grooming Management Software barcode.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10429SourceCodester Pet Grooming Management Software ajax_product.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10428SourceCodester Pet Grooming Management Software setting seo_setting.php unrestricted upload8.8v3.10.4%2025-09-15
CVE-2025-10427SourceCodester Pet Grooming Management Software user.php unrestricted upload8.8v3.10.4%2025-09-15
CVE-2025-10426itsourcecode Online Laundry Management System login.php SQL injection9.8v3.10.4%2025-09-15
CVE-2025-10425A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. The attack ma9.8v3.10.5%2025-09-15
CVE-2025-10424A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload. The attack is p9.8v3.10.5%2025-09-15
CVE-2025-10423newbee-mall kaptcha mallKaptcha Captcha6.3CNA v4.00.5%2025-09-15
CVE-2025-10422newbee-mall Order Status paySuccess improper authorization5.3CNA v4.00.3%2025-09-15
CVE-2025-10421SourceCodester Student Grading System update_account.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10420SourceCodester Student Grading System form137.php SQL injection8.8NVD v3.10.4%2025-09-15
CVE-2025-10419SourceCodester Student Grading System del_promote.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10418SourceCodester Student Grading System view_students.php SQL injection8.8v3.10.4%2025-09-15
CVE-2025-10417Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.5%2025-09-15
CVE-2025-10416Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.4%2025-09-15
CVE-2025-10203Relative path traversal vulnerability in Digilent WaveForms8.5CNA v4.00.2%2025-09-15
CVE-2025-9826M-Files Hubshare stored cross-site scripting7.0CNA v4.00.3%2025-09-15Fix
CVE-2025-9084Mattermost open redirect in OAuth login3.1CNA v3.10.2%2025-09-15Fix
CVE-2025-9078Mattermost weak cache keys lead to post IDOR and link preview poisoning4.3CNA v3.10.2%2025-09-15Fix
CVE-2025-9076Mattermost missing authorization6.5CNA v3.10.3%2025-09-15Fix
CVE-2025-9072One-Click Mattermost account takeover via Poisoned RelayState SAML parameter7.6CNA v3.10.2%2025-09-15Fix
CVE-2025-8396Temporal OSS Server vulnerable to allocation of resources without limits or throttling6.9CNA v4.00.4%2025-09-15Fix
CVE-2025-6999WatchGuard Firebox Authentication portal Request Smuggling vulnerability6.9CNA v4.00.4%2025-09-15Fix
CVE-2025-6947WatchGuard Firebox stored cross-site-scripting (XSS) vulnerability in SIP Proxy Configuration4.8CNA v4.00.5%2025-09-15Fix
CVE-2025-6202Phoenix: Rowhammer attack on Hynix DDR5 devices7.1CNA v4.00.3%2025-09-15
CVE-2025-3025CCleaner link following local privilege escalation7.3CNA v3.10.1%2025-09-15Fix
CVE-2025-59364Express XSS Sanitizer express-xss-sanitizer has an unbounded recursion depth5.3CNA v3.10.4%2025-09-14Fix
CVE-2025-59363One Identity OneLogin incorrect resource transfer7.7CNA v3.10.3%2025-09-14Fix
CVE-2025-36035IBM PowerVM Hypervisor denial of service6.7CNA v3.10.1%2025-09-14Fix
CVE-2025-10415Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.4%2025-09-14
CVE-2025-10414Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.4%2025-09-14