CVE-2025 list

CVE-2025 records published in September 2025

Page three of four: records 2,001 to 3,000 of the 3,729 published in September 2025, newest first. The first page carries the figures for September 2025.

CVE-2025 records published in September 2025, newest first: records 2,001 to 3,000 of 3,729
CVE Summary CVSS EPSS Published Signals
CVE-2025-10413Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.4%2025-09-14
CVE-2025-10411itsourcecode E-Logbook with Health Monitoring System for COVID-19 cross-site scripting6.1v3.10.4%2025-09-14
CVE-2025-10410SourceCodester Link Status Checker index.php server-side request forgery9.8v3.10.4%2025-09-14
CVE-2025-10409SourceCodester Student Grading System rms.php SQL injection8.8v3.10.3%2025-09-14
CVE-2025-10408SourceCodester Student Grading System edit_user.php SQL injection8.8v3.10.3%2025-09-14
CVE-2025-10407SourceCodester Student Grading System view_user.php SQL injection8.8v3.10.3%2025-09-14
CVE-2025-10405itsourcecode Baptism Information Management System listbaptism.php SQL injection9.8NVD v3.10.4%2025-09-14
CVE-2025-10404itsourcecode Baptism Information Management System rptbaptismal.php SQL injection9.8v3.10.4%2025-09-14
CVE-2025-10403PHPGurukul Beauty Parlour Management System view-enquiry.php SQL injection9.8v3.10.4%2025-09-14
CVE-2025-10402PHPGurukul Beauty Parlour Management System readenq.php SQL injection9.8v3.10.4%2025-09-14
CVE-2025-10401D-Link DIR-823x diag_ping command injection8.8v3.19.2%2025-09-14
CVE-2025-10400SourceCodester Food Ordering Management System ticket-message.php SQL injection8.8v3.10.3%2025-09-14
CVE-2025-10399Korzh EasyQuery Query Builder UI fetch SQL injection5.3CNA v4.00.2%2025-09-14
CVE-2025-10398fcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted upload8.8v3.10.3%2025-09-14
CVE-2025-10397Magicblack MacCMS API server-side request forgery7.2v3.10.3%2025-09-14
CVE-2025-10396SourceCodester Pet Grooming Management Software edit_role.php SQL injection9.8v3.10.5%2025-09-14
CVE-2025-10395Magicblack MacCMS Scheduled Task col_url server-side request forgery7.2v3.10.3%2025-09-14
CVE-2025-10394fcba_zzm ics-park Smart Park Management System Scheduled Task JobController.java code injection7.2v3.10.4%2025-09-14
CVE-2025-10393miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery5.3CNA v4.00.3%2025-09-14
CVE-2025-10392Mercury KM08-708H GiGA WiFi Wave2 HTTP header stack-based overflow9.3CNA v4.00.7%2025-09-14
CVE-2025-10391CRMEB OutAccountServices.php testOutUrl server-side request forgery8.8v3.10.3%2025-09-14
CVE-2025-10390CRMEB UserAddressServices.php editAddress improper authorization8.8v3.10.4%2025-09-14
CVE-2025-10389CRMEB Administrator Password SystemAdminServices.php save improper authorization8.8v3.10.4%2025-09-14
CVE-2025-10388Selleo Mentingo Create New Course Basic settings enroll-course cross-site scripting5.1CNA v4.00.3%2025-09-14
CVE-2025-10387codesiddhant Jasmin Ransomware handshake.php SQL injection8.8NVD v3.10.4%2025-09-14
CVE-2025-10386Yida ECMS Consulting Enterprise Management System POST request login.do cross-site scripting5.3CNA v4.00.3%2025-09-14
CVE-2025-10385Mercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflow8.7CNA v4.04.0%2025-09-14
CVE-2025-10204Unauth Admin Reset Password on AC Smart II7.1CNA v4.00.5%2025-09-14Nuclei
CVE-2025-6051Regular expression denial of service (ReDoS) in huggingface/Transformers5.3CNA v3.00.4%2025-09-14Fix
CVE-2025-0164IBM QRadar SIEM information disclosure2.3CNA v3.10.1%2025-09-14Fix
CVE-2025-10384yangzongzhuan RuoYi Role cancelAll improper authorization5.3CNA v4.00.4%2025-09-13
CVE-2025-10374Shenzhen Sixun Business Management System OperatorStop improper authorization6.9CNA v4.00.4%2025-09-13
CVE-2025-10373Portabilis i-Educar educar_turma_tipo_cad.php cross-site scripting6.1v3.10.2%2025-09-13
CVE-2025-10372Portabilis i-Educar educar_modulo_cad.php cross-site scripting5.4v3.10.2%2025-09-13
CVE-2025-10371eCharge Hardy Barth Salia PLCC api.php unrestricted upload6.9CNA v4.00.4%2025-09-13Fix
CVE-2025-10370MiczFlor RPi-Jukebox-RFID userScripts.php cross-site scripting5.4v3.10.7%2025-09-13Exploit code
CVE-2025-10369MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross-site scripting6.1v3.10.3%2025-09-13
CVE-2025-10368MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross-site scripting6.1v3.10.3%2025-09-13
CVE-2025-10367MiczFlor RPi-Jukebox-RFID cardEdit.php cross-site scripting6.1v3.10.3%2025-09-13
CVE-2025-10366MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross-site scripting5.4v3.10.3%2025-09-13
CVE-2025-10359Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection9.8v3.15.0%2025-09-13
CVE-2025-10358Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection9.8v3.16.1%2025-09-13
CVE-2025-10340WhatCD Gazelle Commit message change_log.php cross-site scripting5.1CNA v4.00.3%2025-09-13
CVE-2025-10332cdevroe Unmark info.php cross-site scripting5.4v3.10.3%2025-09-13
CVE-2025-10331cdevroe Unmark Marks.php cross-site scripting5.4v3.10.3%2025-09-13
CVE-2025-59139Hono has Body Limit Middleware Bypass5.3CNA v3.10.4%2025-09-12Fix
CVE-2025-59058Httpsig-rs's HMAC verification is vulnerable to timing attack5.9CNA v3.10.3%2025-09-12Fix
CVE-2025-59054dstack has insecure LUKS2 persistent storage partitions that may be opened and used8.5CNA v4.00.2%2025-09-12Fix
CVE-2025-58781Wireless Tsukamoto WTW-EAGLE App improper certificate validation6.3CNA v4.00.1%2025-09-12
CVE-2025-58754Axios is vulnerable to DoS attack through lack of data size check7.5CNA v3.11.1%2025-09-12Fix
CVE-2025-58434FlowiseAI Flowise password reset endpoint missing authentication9.8CNA v3.150.5%2025-09-12NucleiEmerging ThreatsExploit codeKCVFix
CVE-2025-57579TOTOLINK X2000R hard-coded credentials8.0CISA ADP v3.10.6%2025-09-12
CVE-2025-57578H3C Magic M M2V100R006 hard-coded credentials8.0CISA ADP v3.10.5%2025-09-12
CVE-2025-57577H3C R365V300R004 hard-coded credentials8.0CISA ADP v3.10.6%2025-09-12
CVE-2025-56467Axis Bank Axis Mobile App information disclosure6.5CISA ADP v3.10.3%2025-09-12
CVE-2025-55996Rakuten Viber cross-site scripting6.3CISA ADP v3.10.2%2025-09-12
CVE-2025-55835Sueamcms file upload9.8CISA ADP v3.10.9%2025-09-12
CVE-2025-55319Microsoft Agentic AI and Visual Studio Code remote code execution8.8CNA v3.10.9%2025-09-12Exploit codeFix
CVE-2025-52074PHPGurukul Online Shopping Portal cross-site scripting6.1CISA ADP v3.10.2%2025-09-12
CVE-2025-45587Audi Universal Traffic Recorder FTP service stack-based buffer overflow7.0CISA ADP v3.10.3%2025-09-12
CVE-2025-45586Audi Universal Traffic Recorder unrestricted file upload7.5v3.10.3%2025-09-12
CVE-2025-45585Audi Universal Traffic Recorder Multiple stored cross-site scripting5.4CISA ADP v3.10.2%2025-09-12
CVE-2025-45584Audi Universal Traffic Recorder improper access control7.5CISA ADP v3.10.4%2025-09-12
CVE-2025-45583Audi Universal Traffic Recorder improper authentication9.1v3.10.4%2025-09-12
CVE-2025-43796Liferay Portal: Missing Rate Limiting in GraphQL endpoint enables resource exhaustion Attack7.1CNA v4.00.4%2025-09-12Fix
CVE-2025-43795Liferay Portal's System, Instance and Site settings are vulnerable to open redirect5.1CNA v4.00.2%2025-09-12Fix
CVE-2025-43789Liferay Portal JSON Web Services Direct Class Invocation enables Service Access Policy Execution1.0CNA v4.00.2%2025-09-12Fix
CVE-2025-43788Liferay Portal's Organization Selector exposes organization data to remote authenticated users5.3CNA v4.00.3%2025-09-12Fix
CVE-2025-43787Liferay Portal's selection modal is vulnerable to XSS5.1CNA v4.00.2%2025-09-12Fix
CVE-2025-39798Linux kernel NFS automount vulnerability7.3CNA v3.10.3%2025-09-12Fix
CVE-2025-39797Linux kernel XFRM security association SPI allocation vulnerability7.8v3.10.2%2025-09-12Fix
CVE-2025-39796In the Linux kernel, the following vulnerability has been resolved: net: lapbether: ignore ops-locked netdevs Syzkaller managed to trigger lock dependency in xsk_notify via register_netdevice. As discussed in [0], using register_netdevice in the notifiers is problematic so skip adding lapbeth for7.8v3.10.2%2025-09-12Fix
CVE-2025-39795Linux kernel block layer chunk_sectors limit stacking vulnerability5.5NVD v3.10.2%2025-09-12Fix
CVE-2025-39794Linux kernel tegra crash5.5v3.10.2%2025-09-12Fix
CVE-2025-39793Linux kernel io_uring memory mapping integer overflow7.8CNA v3.10.2%2025-09-12Fix
CVE-2025-39792Linux kernel device mapper zoned target BIO splitting deadlock7.8CNA v3.10.2%2025-09-12Fix
CVE-2025-27240Secondary-order SQL injection in Zabbix Server when deleting an autoregistered host7.5CNA v4.01.3%2025-09-12Fix
CVE-2025-27238Zabbix API hostprototype.get lists data to users with insufficient authorization2.1CNA v4.00.2%2025-09-12Fix
CVE-2025-27234Zabbix agent 2 smartctl plugin RCE vulnerability in Zabbix7.3CNA v4.00.3%2025-09-12Fix
CVE-2025-27233Zabbix agent 2 smartctl plugin argument injection in Zabbix and later5.7CNA v4.00.2%2025-09-12Fix
CVE-2025-21043Samsung Mobile Devices out-of-bounds write8.8CNA v3.12.1%2025-09-12KEVFix
CVE-2025-21042Samsung Mobile Devices out-of-bounds write8.8CNA v3.135.6%2025-09-12KEVExploit codeFix
CVE-2025-10365Authentication bypass in Evertz SDVN9.3CNA v4.05.6%2025-09-12
CVE-2025-10364Unauthenticated arbitrary command injection in Evertz SDVN9.3CNA v4.06.2%2025-09-12
CVE-2025-10330cdevroe Unmark searchform.php cross-site scripting6.1v3.10.4%2025-09-12
CVE-2025-10329cdevroe Unmark Marks.php server-side request forgery9.8v3.10.4%2025-09-12
CVE-2025-10328MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection9.8v3.17.8%2025-09-12
CVE-2025-10327MiczFlor RPi-Jukebox-RFID shuffle.php os command injection9.8v3.110.2%2025-09-12Exploit code
CVE-2025-10326MiczFlor RPi-Jukebox-RFID single.php os command injection9.8v3.15.9%2025-09-12
CVE-2025-10325Wavlink WL-WN578W2 login.cgi sub_401BA4 command injection8.8v3.15.6%2025-09-12
CVE-2025-10324Wavlink WL-WN578W2 firewall.cgi sub_401C5C command injection9.8v3.16.7%2025-09-12
CVE-2025-10323Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injection9.8v3.16.7%2025-09-12
CVE-2025-10322Wavlink WL-WN578W2 sysinit.html password recovery6.9CNA v4.00.5%2025-09-12
CVE-2025-10321Wavlink WL-WN578W2 live_online.shtml information disclosure6.9CNA v4.00.5%2025-09-12
CVE-2025-10320iteachyou Dreamer CMS updatePwd weak password2.3CNA v4.00.2%2025-09-12
CVE-2025-10319JeecgBoot Tenant Log Export exportLog improper authorization6.5v3.10.3%2025-09-12
CVE-2025-10318JeecgBoot WebSocket message sendWebSocketMsg improper authorization8.8v3.10.4%2025-09-12
CVE-2025-10291linlinjava litemall cancel WxAftersaleController improper authorization8.8v3.10.3%2025-09-12
CVE-2025-10288roncoo roncoo-pay list improper authentication6.9CNA v4.00.4%2025-09-12
CVE-2025-10287roncoo roncoo-pay orderQuery direct request2.3CNA v4.00.3%2025-09-12
CVE-2025-10278YunaiV ruoyi-vue-pro transfer improper authorization8.8v3.10.3%2025-09-12
CVE-2025-10277YunaiV yudao-cloud submit improper authorization8.8NVD v3.10.3%2025-09-12
CVE-2025-10276YunaiV ruoyi-vue-pro transfer improper authorization8.8v3.10.3%2025-09-12
CVE-2025-10275YunaiV yudao-cloud transfer improper authorization8.8v3.10.3%2025-09-12
CVE-2025-10274erjinzhi 10OA item cross-site scripting6.1v3.10.4%2025-09-12
CVE-2025-10273erjinzhi 10OA file.aspx path traversal5.3v3.10.7%2025-09-12
CVE-2025-10269Spirit Framework WordPress plugin authenticated (Subscriber+) local file inclusion7.5CNA v3.10.6%2025-09-12
CVE-2025-10267NewType Infortech｜NUP Portal missing authentication6.9CNA v4.00.4%2025-09-12Fix
CVE-2025-10266NewType Infortech｜NUP Portal SQL injection9.3CNA v4.00.6%2025-09-12Fix
CVE-2025-10265Digiever｜NVR OS command injection8.7CNA v4.01.1%2025-09-12Fix
CVE-2025-10264Digiever｜NVR exposure of sensitive information10.0CNA v4.00.5%2025-09-12Fix
CVE-2025-10176The Hack Repair Guy's Plugin Archiver WordPress plugin arbitrary file deletion7.2CNA v3.10.7%2025-09-12Fix
CVE-2025-10148curl predictable WebSocket mask5.3CISA ADP v3.10.5%2025-09-12Fix
CVE-2025-10094Improper validation of specified quantity in input in GitLab6.5CNA v3.10.5%2025-09-12Fix
CVE-2025-9881Ultimate Blogroll WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-09-12
CVE-2025-9880Side Slide Responsive Menu WordPress plugin cross-site request forgery6.1CNA v3.10.2%2025-09-12
CVE-2025-9879Spotify Embed Creator WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-12
CVE-2025-9877Embed Google Datastudio WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-12
CVE-2025-9807The Events Calendar WordPress plugin unauthenticated SQL injection7.5CNA v3.10.3%2025-09-12Fix
CVE-2025-9556LangChainGo Jinja2 template rendering server-side template injection9.8CISA ADP v3.10.7%2025-09-12
CVE-2025-9086curl out-of-bounds read for cookie path7.5CISA ADP v3.11.4%2025-09-12Fix
CVE-2025-8699KioSoft Stored Value Unattended Payment Solution insecure storage of sensitive information9.1CISA ADP v3.10.7%2025-09-12
CVE-2025-8575LWS Cleaner WordPress plugin arbitrary file deletion7.2CNA v3.10.8%2025-09-12Fix
CVE-2025-8280Contact Form 7 reCAPTCHA WordPress plugin reflected XSS via $_SERVER['REQUEST_URI']5.8CISA ADP v3.10.2%2025-09-12
CVE-2025-7448Man in the middle (MitM) attack vulnerability in Wi-SUN library8.6CNA v4.00.2%2025-09-12Fix
CVE-2025-7337Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.5%2025-09-12Fix
CVE-2025-6769Exposure of sensitive system information to an unauthorized control sphere in GitLab4.3CNA v3.10.3%2025-09-12Fix
CVE-2025-6638Regular expression denial of service (ReDoS) in huggingface/Transformers7.5v3.10.5%2025-09-12Fix
CVE-2025-6454Server-side request forgery (SSRF) in GitLab8.5CNA v3.10.7%2025-09-12Fix
CVE-2025-4235User-ID Credential Agent: Cleartext Exposure of Service Account password7.2CNA v4.00.2%2025-09-12Fix
CVE-2025-4234Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials2.4CNA v4.00.1%2025-09-12Fix
CVE-2025-3650jQuery Colorbox WordPress plugin Contributor+ stored XSS3.5CISA ADP v3.10.2%2025-09-12
CVE-2025-2256Improper validation of specified quantity in input in GitLab7.5CNA v3.10.5%2025-09-12Fix
CVE-2025-1250Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.5%2025-09-12Fix
CVE-2025-59055InstantCMS vulnerable to server-side request forgery via package installer4.7CNA v3.10.5%2025-09-11
CVE-2025-59053AIRI's character card/chat UI is vulnerable to XSS and can lead to RCE9.7CNA v3.10.6%2025-09-11
CVE-2025-59047matrix-org matrix-rust-sdk matrix-sdk-base: Panic in the `RoomMember::normalized_power_level` method2.7CNA v4.00.4%2025-09-11Fix
CVE-2025-58364OpenPrinting CUPS libcups library null pointer dereference6.5CNA v3.11.1%2025-09-11Fix
CVE-2025-58321DIALink directory traversal authentication bypass10.0CNA v3.11.3%2025-09-11Fix
CVE-2025-58320DIALink directory traversal authentication bypass7.3CNA v3.115.7%2025-09-11Fix
CVE-2025-58145Xen arm issues with page refcounting7.5CISA ADP v3.10.4%2025-09-11Fix
CVE-2025-58144Xen arm issues with page refcounting7.5CISA ADP v3.10.5%2025-09-11Fix
CVE-2025-58143Xen Mutiple vulnerabilities in the Viridian interface9.8CISA ADP v3.10.4%2025-09-11Fix
CVE-2025-58142Xen Mutiple vulnerabilities in the Viridian interface9.8CISA ADP v3.10.5%2025-09-11Fix
CVE-2025-58065dpgaspar Flask-AppBuilder flask App Builder has an authentication bypass vulnerability when6.5CNA v3.10.4%2025-09-11Fix
CVE-2025-58060cups has authentication bypass with AuthType Negotiate8.0CNA v3.11.0%2025-09-11Exploit codeFix
CVE-2025-56556Intelliants Subrion CMS Run SQL Query tool privilege escalation3.8CISA ADP v3.10.2%2025-09-11
CVE-2025-48041Erlang OTP SSH_FXP_OPENDIR may lead to Exhaustion of File Handles7.1CNA v4.00.4%2025-09-11Fix
CVE-2025-48040Erlang OTP malicious Key Exchange messages may lead to Excessive resource consumption6.9CNA v4.00.4%2025-09-11Fix
CVE-2025-48039Erlang OTP Unverified Paths can cause Excessive Use of System Resources5.3CNA v4.00.4%2025-09-11Fix
CVE-2025-48038Erlang OTP Unverified File Handles can cause Excessive Use of System Resources5.3CNA v4.00.4%2025-09-11Fix
CVE-2025-43790Liferay Portal is vulnerable to insecure direct object reference attack7.4CNA v4.00.3%2025-09-11Fix
CVE-2025-43782Liferay Portal API allows Authenticated Users to Access Workflow Definitions by Name5.3CNA v4.00.3%2025-09-11Fix
CVE-2025-40696Cross-site scripting in PHPGurukul Online Fire Reporting System5.4v3.10.2%2025-09-11
CVE-2025-40695Cross-site scripting in PHPGurukul Online Fire Reporting System5.4v3.10.2%2025-09-11
CVE-2025-40694Cross-site scripting in PHPGurukul Online Fire Reporting System5.4v3.10.2%2025-09-11
CVE-2025-40693Cross-site scripting in PHPGurukul Online Fire Reporting System5.4NVD v3.10.2%2025-09-11
CVE-2025-40692SQL injection in PHPGurukul Online Fire Reporting System9.8v3.10.3%2025-09-11
CVE-2025-40691SQL injection in PHPGurukul Online Fire Reporting System9.8v3.10.3%2025-09-11
CVE-2025-40690SQL injection in PHPGurukul Online Fire Reporting System9.8NVD v3.10.3%2025-09-11
CVE-2025-40689SQL injection in PHPGurukul Online Fire Reporting System9.8v3.10.3%2025-09-11
CVE-2025-40687SQL injection in PHPGurukul Online Fire Reporting System9.8v3.10.3%2025-09-11
CVE-2025-40300Linux kernel VM exit branch predictor isolation vulnerability5.5NVD v3.10.4%2025-09-11Fix
CVE-2025-39791Linux kernel dm-crypt zoned target write handling improper locking7.8CNA v3.10.1%2025-09-11Fix
CVE-2025-39790Linux kernel MHI host event ring handling double free8.4CNA v3.10.2%2025-09-11Fix
CVE-2025-39789Linux kernel x86 AEGIS crypto implementation vulnerability7.3CNA v3.10.2%2025-09-11Fix
CVE-2025-39788Linux kernel Exynos UFS host controller vulnerability7.8v3.10.2%2025-09-11Fix
CVE-2025-39787In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firm7.8CNA v3.10.2%2025-09-11Fix
CVE-2025-39786Linux kernel AD7173 ADC syscalib_mode channel indexing out-of-bounds read7.8CNA v3.10.1%2025-09-11Fix
CVE-2025-39785Linux kernel HiBMC DRM IRQ handling use-after-free7.8CNA v3.10.1%2025-09-11Fix
CVE-2025-39784Linux kernel PCIe link retrain speed calculation vulnerability5.5v3.10.1%2025-09-11Fix
CVE-2025-39783Linux kernel PCI endpoint configfs group list use-after-free7.8NVD v3.10.2%2025-09-11Fix
CVE-2025-39782Linux kernel jbd2 improper locking5.5NVD v3.10.1%2025-09-11Fix
CVE-2025-39781Linux kernel cache flush vmap handling denial of service5.5v3.10.1%2025-09-11Fix
CVE-2025-39780Linux kernel sched_ext task state transitions vulnerability7.8CNA v3.10.2%2025-09-11Fix
CVE-2025-39779Linux kernel btrfs subpage writeback tagging vulnerability7.8CNA v3.10.2%2025-09-11Fix
CVE-2025-39777Linux kernel acomp workspace free function vulnerability5.5v3.10.1%2025-09-11Fix
CVE-2025-39776Linux kernel debug_vm_pgtable test page tables use-after-free7.0CNA v3.10.2%2025-09-11Fix
CVE-2025-39775Linux kernel mremap userfaultfd page table handling vulnerability5.5NVD v3.10.1%2025-09-11Fix
CVE-2025-39774Linux kernel RZ/G2L ADC driver vulnerability5.5v3.10.1%2025-09-11Fix
CVE-2025-39773Linux kernel bridge multicast query timer denial of service5.5NVD v3.10.1%2025-09-11Fix
CVE-2025-39772Linux kernel HiBMC display driver null pointer dereference5.5v3.10.1%2025-09-11Fix
CVE-2025-39771In the Linux kernel, the following vulnerability has been resolved: regulator: pca9450: Use devm_register_sys_off_handler With module test, there is error dump: ------------[ cut here ]------------ notifier callback pca9450_i2c_restart_handler already registered WARNING: kernel/notifier.c:23 a5.5v3.10.1%2025-09-11Fix
CVE-2025-39770Linux kernel GSO IPv6 checksum offload vulnerability7.5CNA v3.10.4%2025-09-11Fix
CVE-2025-39769Linux kernel bnxt_en Ethernet driver improper locking5.5v3.10.1%2025-09-11Fix
CVE-2025-39768Linux kernel mlx5 hardware steering rule rehash reachable assertion5.5v3.10.1%2025-09-11Fix
CVE-2025-39767Linux kernel LoongArch module loader deadlock5.5v3.10.1%2025-09-11Fix
CVE-2025-39766In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setup can trigger a WARNING in htb_activate due to the condition: !cl->leaf.q->q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 17.8v3.10.2%2025-09-11Fix
CVE-2025-39765Linux kernel ALSA user timer ID allocation null pointer dereference5.5v3.10.2%2025-09-11Fix
CVE-2025-39764Linux kernel netfilter conntrack expectation dumper memory leak5.5NVD v3.10.2%2025-09-11Fix
CVE-2025-39763Linux kernel ACPI APEI memory error handling vulnerability5.5v3.10.2%2025-09-11Fix
CVE-2025-39762Linux kernel AMD display driver null pointer dereference5.5v3.10.2%2025-09-11Fix
CVE-2025-39761Linux kernel ath12k Wi-Fi driver out-of-bounds read8.8CNA v3.10.2%2025-09-11Fix
CVE-2025-39760Linux kernel config out-of-bounds read7.1v3.10.2%2025-09-11Fix
CVE-2025-39759Linux kernel btrfs qgroup rescan use-after-free7.0v3.10.1%2025-09-11Fix
CVE-2025-39758Linux kernel siw RDMA transport vulnerability9.8CNA v3.10.4%2025-09-11Fix
CVE-2025-39757Linux kernel USB audio UAC3 descriptor parser out-of-bounds read7.1v3.10.2%2025-09-11Fix
CVE-2025-39756Linux kernel file descriptor table allocation memory leak5.5NVD v3.10.2%2025-09-11Fix
CVE-2025-39754Linux kernel hugetlb smaps handling race condition4.7NVD v3.10.1%2025-09-11Fix
CVE-2025-39753In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops Clears up the warning added in 7ee3647243e5 ("migrate: Remove call to ->writepage") that occurs in various xfstests, causing "something found in dmesg" failures. [ 341.136573] gf5.5v3.10.2%2025-09-11Fix
CVE-2025-39752Linux kernel Rockchip SMP initialization denial of service5.5v3.10.2%2025-09-11Fix
CVE-2025-39750Linux kernel ath12k Wi-Fi driver out-of-bounds read8.8CNA v3.10.2%2025-09-11Fix
CVE-2025-39749Linux kernel rcu race condition7.0v3.10.2%2025-09-11Fix
CVE-2025-39748Linux kernel BPF verifier vulnerability5.5NVD v3.10.2%2025-09-11Fix
CVE-2025-39747Linux kernel MSM GPU driver null pointer dereference5.5v3.10.2%2025-09-11Fix
CVE-2025-39746Linux kernel ath10k Wi-Fi driver denial of service5.5v3.10.2%2025-09-11Fix
CVE-2025-39745Linux kernel RCU torture test lock extension check vulnerability5.5v3.10.2%2025-09-11Fix
CVE-2025-39744Linux kernel RCU read-side unlock handling denial of service7.1v3.10.2%2025-09-11Fix
CVE-2025-39743Linux kernel JFS inode page cleanup vulnerability7.8v3.10.2%2025-09-11Fix
CVE-2025-39742Linux kernel hfi1 RDMA driver divide by zero5.5v3.10.2%2025-09-11Fix
CVE-2025-39741Linux kernel Xe GPU migration copy vulnerability5.5v3.10.1%2025-09-11Fix
CVE-2025-39740Linux kernel drm/xe/migrate use-after-free7.8CNA v3.10.2%2025-09-11Fix
CVE-2025-39739In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS compatible to clients compatible list, as it also needs that workaround. Without this workaround, for example, QRB4210 RB2 which is based on SM4250/SM6115 generat5.5v3.10.2%2025-09-11Fix
CVE-2025-39738Linux kernel btrfs subvolume relocation vulnerability7.3CNA v3.10.2%2025-09-11Fix
CVE-2025-39737Linux kernel kmemleak object pool cleanup memory leak5.5v3.10.2%2025-09-11Fix
CVE-2025-39736Linux kernel kmemleak memory pool allocator deadlock5.5v3.10.1%2025-09-11Fix
CVE-2025-36222IBM Fusion insecure default configuration8.7CNA v3.10.4%2025-09-11Fix
CVE-2025-27466Xen Mutiple vulnerabilities in the Viridian interface9.8CISA ADP v3.10.5%2025-09-11Fix
CVE-2025-26499Wind River Studio Developer race condition6.0CNA v3.10.1%2025-09-11Fix
CVE-2025-10272erjinzhi 10OA catalogue cross-site scripting6.1v3.10.4%2025-09-11
CVE-2025-10271erjinzhi 10OA finder cross-site scripting6.1v3.10.4%2025-09-11
CVE-2025-10255Ascensio System SIA OnlyOffice Comment Messages.aspx cross-site scripting5.1CNA v4.00.3%2025-09-11
CVE-2025-10254Ascensio System SIA OnlyOffice SVG Image Messages.aspx cross-site scripting5.1CNA v4.00.3%2025-09-11
CVE-2025-10253openDCIM SVG file uploadifive.php cross-site scripting5.1CNA v4.00.3%2025-09-11
CVE-2025-10252SEAT Queue Ticket Kiosk Java RMI Registry deserialization2.3CNA v4.00.2%2025-09-11
CVE-2025-10251FoxCMS Images.php batchCope SQL injection9.8v3.10.4%2025-09-11
CVE-2025-10250DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key2.3CNA v4.00.2%2025-09-11
CVE-2025-10247JEPaaS Filter doFilterInternal access control5.3CNA v4.00.3%2025-09-11
CVE-2025-10246lokibhardwaj PHP-Code-For-Unlimited-File-Upload f.php cross-site scripting5.1CNA v4.00.3%2025-09-11
CVE-2025-10245Display Painéis TGA Galeria rename path traversal4.8CNA v4.00.4%2025-09-11
CVE-2025-10236binary-husky gpt_academic LaTeX file latex_toolbox.py merge_tex_files_ path traversal7.5v3.10.8%2025-09-11
CVE-2025-10235Scada-LTS Reports reports.shtm cross-site scripting4.8v3.10.3%2025-09-11
CVE-2025-10234Scada-LTS Data Point Edit data_point_edit.shtm cross-site scripting4.8v3.10.3%2025-09-11
CVE-2025-10193Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks7.4CNA v4.00.2%2025-09-11Fix
CVE-2025-10127Daikin Europe N.V Security Gateway weak password recovery mechanism for forgotten password8.8CNA v4.00.6%2025-09-11
CVE-2025-9918Zip Slip in Google SecOps SOAR allows for remote code execution8.7CNA v4.00.6%2025-09-11Fix
CVE-2025-9910jsondiffpatch is vulnerable to cross-site scripting (XSS) via HtmlFormatter::nodeBegin2.3CNA v4.00.3%2025-09-11Fix
CVE-2025-9874Ultimate Classified Listings WordPress plugin authenticated (Contributor+) local file inclusion7.5CNA v3.10.6%2025-09-11Fix
CVE-2025-9861ThemeLoom Widgets WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-9860Mixtape WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-9855Enhanced BibliPlug WordPress plugin authenticated (Contirbutor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-9850Evenium WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-11Fix
CVE-2025-9776CatFolders Tame Your WordPress Media Library by Category plugin SQL injection6.5CNA v3.10.4%2025-09-11Fix
CVE-2025-9693User Meta User Profile Builder and User management WordPress plugin arbitrary file deletion8.0CNA v3.10.6%2025-09-11
CVE-2025-9635Analytics Reduce Bounce Rate WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11
CVE-2025-9634Plugin updates blocker WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-09-11
CVE-2025-9633LH Signing WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11
CVE-2025-9632PhpList Subber WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11
CVE-2025-9631AutoCatSet WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11
CVE-2025-9628The integration of the AMO.CRM WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11
CVE-2025-9627Run Log WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-09-11Fix
CVE-2025-9623Admin in English with Switch WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11
CVE-2025-9620Seo Monster WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-09-11
CVE-2025-9617Publish approval WordPress plugin cross-site request forgery5.3CNA v3.10.1%2025-09-11
CVE-2025-9451Smartcat Translator for WPML WordPress plugin SQL injection6.5CNA v3.10.3%2025-09-11Fix
CVE-2025-9319Lenovo Wallpaper Client download without integrity check7.5CNA v4.00.2%2025-09-11
CVE-2025-9214Lenovo LJ2206W Printer missing authentication5.3CNA v4.00.2%2025-09-11Fix
CVE-2025-9201Lenovo Browser uncontrolled search path8.5CNA v4.00.2%2025-09-11Fix
CVE-2025-9128eID Easy WordPress plugin authenticated (Contributor+) stored cross-site scripting via id parameter6.4CNA v3.10.2%2025-09-11Fix
CVE-2025-9123CBX Map for Google Map and OpenStreetMap WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11Fix
CVE-2025-9073All in one Minifier WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-09-11Fix
CVE-2025-9059Broadcom 8.6.IT Management Suite elevation of privileges vulnerability in IT Management Suite8.8CNA v4.00.1%2025-09-11Fix
CVE-2025-9034Wp Edit Password Protected WordPress plugin open redirect6.1CISA ADP v3.10.2%2025-09-11Fix
CVE-2025-9018Time Tracker WordPress plugin unauthorized access8.8CNA v3.10.4%2025-09-11Fix
CVE-2025-8721Workable API WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-09-11
CVE-2025-8716OpenText Content Management cache exploitation vulnerability5.8CNA v4.00.2%2025-09-11
CVE-2025-8692Coupon API WordPress plugin authenticated (Administrator+) SQL injection via log_duration4.9CNA v3.10.4%2025-09-11
CVE-2025-8691WP Scriptcase WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-8689Elements Plus! WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11Fix
CVE-2025-8686WP Easy FAQs WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-09-11
CVE-2025-8570BeyondCart Connector WordPress plugin privilege escalation9.8CNA v3.10.6%2025-09-11Exploit codeFix
CVE-2025-8557Lenovo XClarity Orchestrator (LXCO) unprotected alternate channel8.7CNA v4.00.3%2025-09-11Fix
CVE-2025-8492Salon Booking System WordPress plugin missing authorization unauthenticated AJAX actions execution5.3CNA v3.10.3%2025-09-11Fix
CVE-2025-8481Blog Designer For Elementor WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-09-11
CVE-2025-8479Zoho Flow WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-11Fix
CVE-2025-8445Countdown Timer for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-8425My WP Translate WordPress plugin missing authorization authenticated arbitrary options update8.8CNA v3.10.3%2025-09-11
CVE-2025-8423My WP Translate WordPress plugin missing authorization arbitrary option read and deletion5.4CNA v3.10.4%2025-09-11
CVE-2025-8422Propovoice WordPress plugin unauthenticated arbitrary file read7.5CNA v3.10.6%2025-09-11Exploit codeFix
CVE-2025-8417Catalog Importer, Scraper and Crawler WordPress plugin unauthenticated PHP code injection8.1CNA v3.10.7%2025-09-11
CVE-2025-8398azurecurve BBCode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-8392Mitfahrgelegenheit WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-8318Jobify WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11
CVE-2025-8316Certifica WP WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-09-11
CVE-2025-8215Responsive Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-11Fix
CVE-2025-8061Lenovo Dispatcher exposed IOCTL without access control7.3CNA v4.00.4%2025-09-11Exploit codeFix
CVE-2025-6088Improper authorization in danny-avila/LibreChat3.1NVD v3.10.3%2025-09-11Fix
CVE-2025-5801Digital Events Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-09-11
CVE-2025-0763Ultimate Classified Listings WordPress plugin unauthorized access4.3CNA v3.10.2%2025-09-11
CVE-2025-59052Angular SSR: Global Platform Injector race condition leads to Cross-request data leakage7.1CNA v4.00.3%2025-09-10Fix
CVE-2025-59049Mockoon has a path traversal and LFI in the static file serving endpoint7.5CNA v3.11.8%2025-09-10NucleiFix
CVE-2025-59045Stalwart vulnerable to memory exhaustion via CalDAV Event Expansion7.1CNA v4.00.3%2025-09-10Fix
CVE-2025-59041Anthropic Claude Code git config email handling code injection8.7CNA v4.00.5%2025-09-10Fix
CVE-2025-59035Indico vulnerable to cross-site scripting via LaTeX math code4.6CNA v3.10.2%2025-09-10Fix
CVE-2025-59034Indico may disclose unauthorized user details access via legacy API4.3CNA v3.10.3%2025-09-10Fix
CVE-2025-58764anthropics claude-code claude Code rg vulnerability does not protect against approval prompt bypass8.7CNA v4.00.5%2025-09-10Fix
CVE-2025-57642Sohamjuhin Tourism-Management-System unrestricted file upload7.2CISA ADP v3.11.6%2025-09-10Exploit code
CVE-2025-57573Tenda F3 buffer overflow5.6CISA ADP v3.10.2%2025-09-10
CVE-2025-57572Tenda F3 buffer overflow5.6CISA ADP v3.10.2%2025-09-10
CVE-2025-57571Tenda F3 buffer overflow5.6CISA ADP v3.10.2%2025-09-10
CVE-2025-57570Tenda F3 buffer overflow5.6CISA ADP v3.10.2%2025-09-10
CVE-2025-57569Tenda F3 buffer overflow5.6CISA ADP v3.10.2%2025-09-10
CVE-2025-57520Decap CMS cross-site scripting (XSS)6.1CISA ADP v3.10.3%2025-09-10Exploit code
CVE-2025-57392Benimpos incorrect permission assignment7.8CISA ADP v3.10.2%2025-09-10
CVE-2025-56578RTSPtoWeb missing authentication5.7CISA ADP v3.10.3%2025-09-10
CVE-2025-56466Masterlifecrm Dietly hard-coded credentials7.5CISA ADP v3.10.3%2025-09-10
CVE-2025-56413fit2cloud 1Panel function OperateSSH in OS command injection8.8CISA ADP v3.11.2%2025-09-10
CVE-2025-56407UTCMS RunSql function SQL injection8.8CISA ADP v3.10.3%2025-09-10
CVE-2025-56406mcp-neo4j SSE service command injection7.5CISA ADP v3.10.5%2025-09-10
CVE-2025-56405Litmus mcp-server missing authentication7.5CISA ADP v3.10.3%2025-09-10
CVE-2025-56404MariaDB Model Context Protocol improper input validation7.5CISA ADP v3.10.3%2025-09-10
CVE-2025-55976Intelbras Iwr 3000n cleartext transmission of sensitive information8.4CISA ADP v3.13.3%2025-09-10Emerging Threats
CVE-2025-54376SpectoLabs Hoverfly admin WebSocket log endpoint missing authentication7.8CNA v4.00.7%2025-09-10Fix
CVE-2025-54123Hoverfly is vulnerable to remote code execution through an insecure middleware implementation9.8CNA v3.110.5%2025-09-10NucleiExploit code
CVE-2025-50892EaseUS Eudskacs.sys Driver improper privilege management7.8CISA ADP v3.10.1%2025-09-10
CVE-2025-43938Dell PowerProtect Data Manager plaintext password storage5.0CNA v3.10.1%2025-09-10Fix
CVE-2025-43888Dell PowerProtect Data Manager sensitive information in log files8.8CNA v3.10.1%2025-09-10Fix
CVE-2025-43887Dell PowerProtect Data Manager incorrect default permissions7.0CNA v3.10.1%2025-09-10Fix
CVE-2025-43886Dell PowerProtect Data Manager path traversal4.4CNA v3.10.2%2025-09-10Fix
CVE-2025-43885Dell PowerProtect Data Manager OS command injection7.8CNA v3.10.5%2025-09-10Fix
CVE-2025-43884Dell PowerProtect Data Manager OS command injection8.2CNA v3.10.5%2025-09-10Fix
CVE-2025-43785Liferay Portal and Liferay DXP vulnerable to stored cross-site scripting4.6CNA v4.00.2%2025-09-10Fix
CVE-2025-43784Liferay Portal improper access control6.2CNA v4.00.3%2025-09-10Fix
CVE-2025-43783Liferay Portal is vulnerable to reflected XSS attack through get_editor path5.1CNA v4.00.2%2025-09-10Fix
CVE-2025-43725Dell PowerProtect Data Manager incorrect default permissions7.8CNA v3.10.1%2025-09-10Fix
CVE-2025-41714Path traversal via Upload-Key in SmartEMS Upload Handling8.8CNA v3.10.7%2025-09-10Fix
CVE-2025-40979DLL search order hijack in Wave by Grandstream Networks7.0CNA v4.00.1%2025-09-10Fix
CVE-2025-40725Reflected cross-site scripting (XSS) in Azon Dominator5.1CNA v4.00.3%2025-09-10
CVE-2025-36759Sensitive information disclosure in SolaX Cloud8.7CNA v4.00.3%2025-09-10Fix
CVE-2025-36758Bypass of bruteforce protection in SolaX Cloud6.3CNA v4.00.4%2025-09-10Fix
CVE-2025-36757Bypass of administrator login screen in SolaX Cloud6.3CNA v4.00.3%2025-09-10Fix
CVE-2025-36756Device takeover vulnerability in SolaX Cloud5.8CNA v4.00.3%2025-09-10Fix
CVE-2025-29592aaluoxiang oa_system path traversal5.6CISA ADP v3.10.5%2025-09-10
CVE-2025-20340Cisco IOS XR Address Resolution Protocol Broadcast Storm vulnerability7.4CNA v3.10.6%2025-09-10Fix
CVE-2025-20248Cisco IOS XR Software Image Verification Bypass vulnerability6.0CNA v3.10.1%2025-09-10Fix
CVE-2025-20159Cisco IOS XR Software Management Interface ACL Bypass vulnerability5.3CNA v3.10.3%2025-09-10Fix
CVE-2025-10233kalcaddle kodbox editor.class.php fileSave path traversal4.3v3.10.5%2025-09-10
CVE-2025-10232299ko FileManagerAPIController.php delete path traversal5.3CNA v4.00.5%2025-09-10
CVE-2025-10231N-central incorrect default permissions could lead to privilege escalation7.0CNA v3.10.1%2025-09-10Fix
CVE-2025-10229Freshwork logout endpoint open redirect5.3CNA v4.00.3%2025-09-10
CVE-2025-10227Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk)5.1CNA v4.00.1%2025-09-10Fix
CVE-2025-10226PostgreSQL Upgrade from v10 to in AxxonSoft Axxon One (C-Werk) to Address multiple vulnerabilities9.3CNA v4.00.6%2025-09-10Fix
CVE-2025-10225Incorrect Memory Allocation in OpenSSL-Based Session module in AxxonSoft Axxon One (C-Werk)8.7CNA v4.00.4%2025-09-10Fix
CVE-2025-10224Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)5.3CNA v4.00.3%2025-09-10Fix
CVE-2025-10223Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk)5.3CNA v4.00.3%2025-09-10Fix
CVE-2025-10222Sensitive information disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS4.8CNA v4.00.1%2025-09-10Fix
CVE-2025-10221Hard-coded password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs6.7CNA v4.00.1%2025-09-10Fix
CVE-2025-10220Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS9.3CNA v4.00.7%2025-09-10Fix
CVE-2025-10218lostvip-com ruoyi-go Background Management SysRoleDao.go SelectListPage SQL injection9.8v3.10.4%2025-09-10
CVE-2025-10216GrandNode Voucher ConfirmOrder race condition2.1CNA v4.00.2%2025-09-10
CVE-2025-10215UPDF DLL search path hijacking vulnerability7.8v3.10.2%2025-09-10
CVE-2025-10214UPDF DLL search path hijacking vulnerability7.8v3.10.2%2025-09-10
CVE-2025-10213UPDF DLL search path hijacking vulnerability7.8v3.10.2%2025-09-10
CVE-2025-10211yanyutao0402 ChanCMS getArticle CollectController server-side request forgery5.3CNA v4.00.7%2025-09-10Nuclei
CVE-2025-10210yanyutao0402 ChanCMS Api.js search SQL injection8.8v3.11.3%2025-09-10Nuclei
CVE-2025-10209Papermerge DMS Authorization Token improper authorization5.3CNA v4.00.3%2025-09-10
CVE-2025-10201Google Android Mojo in Google Chrome inappropriate implementation8.8CISA ADP v3.10.3%2025-09-10Fix
CVE-2025-10200Google Chrome Serviceworker use-after-free8.8CISA ADP v3.10.6%2025-09-10Fix
CVE-2025-10197HJSoft HCM Human Resources Management System downlawbase SQL injection5.3CNA v4.00.3%2025-09-10
CVE-2025-10195Seismic App com.seismic.doccenter component export vulnerability4.8CNA v4.00.1%2025-09-10
CVE-2025-10142PagBank / PagSeguro Connect para WooCommerce WordPress plugin SQL injection4.9CNA v3.10.4%2025-09-10Fix
CVE-2025-10126MyBrain Utilities WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-10Fix
CVE-2025-10049Responsive Filterable Portfolio WordPress plugin authenticated (Admin+) arbitrary file upload7.2CNA v3.10.6%2025-09-10Fix
CVE-2025-10040WP Import WordPress plugin unauthorized access7.7CNA v3.10.3%2025-09-10Fix
CVE-2025-10001Import any XML, CSV or Excel File to WordPress plugin limited Unsafe file upload7.2CNA v3.10.6%2025-09-10Fix
CVE-2025-9979Maspik WordPress plugin authenticated (Subscriber+) missing authorization to Spam Log export4.3CNA v3.10.3%2025-09-10Fix
CVE-2025-9943Unauthenticated SQL injection vulnerability in Shibboleth Service Provider9.1CISA ADP v3.10.4%2025-09-10Fix
CVE-2025-9888Maspik WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-09-10Fix
CVE-2025-9857Heateor Login Social Login WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-10Fix
CVE-2025-9714Stack overflow in libxml25.5NVD v3.10.2%2025-09-10Fix
CVE-2025-9622WP Blast SEO and Performance Booster WordPress plugin cross-site request forgery to Cache Clearing4.3CNA v3.10.2%2025-09-10Fix
CVE-2025-9463Payments Plugin and Checkout Plugin for WooCommerce: Stripe WordPress plugin SQL injection6.5CNA v3.10.3%2025-09-10Fix
CVE-2025-9367Welcart e-Commerce WordPress plugin authenticated (Editor+) stored cross-site scripting5.5CNA v3.10.2%2025-09-10Fix
CVE-2025-8778NitroPack WordPress plugin missing authorization authenticated limited settings update4.3CNA v3.10.2%2025-09-10Fix
CVE-2025-8696DoS attack against the Stork UI from an unauthenticated user7.5CNA v3.10.4%2025-09-10Fix
CVE-2025-8681Pega Platform to Infinity are affected by a stored XSS issue in a user interface component5.5CNA v3.10.2%2025-09-10Fix
CVE-2025-8388PowerPack Lite for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-10Fix
CVE-2025-7843Auto Save Remote Images (Drafts) WordPress plugin server-side request forgery6.4CNA v3.10.2%2025-09-10
CVE-2025-7826Testimonial WordPress plugin authenticated (Contributor+) SQL injection6.5CNA v3.10.3%2025-09-10
CVE-2025-7718Resideo Plugin for Resideo WordPress plugin privilege escalation8.8CNA v3.10.3%2025-09-10
CVE-2025-7049WPGYM - Wordpress Gym Management System plugin privilege escalation8.8CNA v3.10.3%2025-09-10
CVE-2025-6189Duplicate Page and Post WordPress plugin SQL injection6.5CNA v3.10.3%2025-09-10Fix
CVE-2025-59046interactive-git-checkout has command injection9.8CNA v3.11.1%2025-09-09
CVE-2025-59044Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)4.4CNA v3.10.1%2025-09-09Fix
CVE-2025-59042PyInstaller has local privilege escalation7.0CNA v4.00.1%2025-09-09Fix
CVE-2025-59039Prebid Universal Creative on npm briefly compromised9.3CNA v4.00.3%2025-09-09
CVE-2025-59038Prebid.js NPM package briefly compromised8.6CNA v4.00.4%2025-09-09Fix
CVE-2025-59037DuckDB NPM packages and briefly compromised with malware8.6CNA v4.00.4%2025-09-09Fix
CVE-2025-59036Infrahub allows authentication with deleted and expired API tokens5.5CNA v3.10.2%2025-09-09Fix
CVE-2025-59019TYPO3 CMS information disclosure via CSV Download5.3CNA v4.00.2%2025-09-09Fix
CVE-2025-59018TYPO3 CMS information disclosure in Workspaces module7.1CNA v4.00.3%2025-09-09Fix
CVE-2025-59017TYPO3 CMS broken access control in Backend AJAX Routes5.3CNA v4.00.3%2025-09-09Fix
CVE-2025-59016TYPO3 CMS information disclosure via File Abstraction Layer5.3CNA v4.00.2%2025-09-09Fix
CVE-2025-59015TYPO3 CMS insufficient entropy in Password Generation6.3CNA v4.00.2%2025-09-09Fix
CVE-2025-59014Denial of service in TYPO3 Bookmark Toolbar5.1CNA v4.00.3%2025-09-09Fix
CVE-2025-59013Open redirect in TYPO3 CMS5.3CNA v4.00.2%2025-09-09Fix
CVE-2025-59008ZIP Code Based Content Protection WordPress plugin SQL injection7.6CNA v3.10.3%2025-09-09Fix
CVE-2025-59005Categorify WordPress plugin broken access control4.3CNA v3.10.2%2025-09-09
CVE-2025-58997Mow WordPress theme cross-site request forgery (CSRF)9.6CNA v3.10.2%2025-09-09Fix
CVE-2025-58993Tutor LMS WordPress plugin SQL injection7.6CNA v3.10.3%2025-09-09Fix
CVE-2025-58991WooCommerce Booking Bundle Hours WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-09Fix
CVE-2025-58990ShopLentor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-09-09Fix
CVE-2025-58989Dynamic Text Field For Contact Form 7 WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-09Fix
CVE-2025-58988My Tickets WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-09Fix
CVE-2025-58987Football Pool WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-09Fix
CVE-2025-58985Additional Custom Product Tabs for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-09Fix
CVE-2025-58984Welcart e-Commerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-09Fix
CVE-2025-58983Include Me WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-09Fix
CVE-2025-58982Pixeline's Email Protector WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-09Fix
CVE-2025-58981Accessibility Checker by Equalize Digital WordPress plugin broken access control5.4CNA v3.10.2%2025-09-09Fix
CVE-2025-58980Export WP Page to Static HTML/CSS WordPress plugin broken access control5.3CNA v3.10.2%2025-09-09Fix
CVE-2025-58979BerqWP WordPress plugin broken access control5.3CNA v3.10.2%2025-09-09Fix
CVE-2025-58978PDF Generator for WordPress plugin broken access control5.3CNA v3.10.2%2025-09-09Fix
CVE-2025-58977WP eBay Product Feeds WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-09-09Fix
CVE-2025-58976Accessibility Checker by Equalize Digital WordPress plugin broken access control4.3CNA v3.10.2%2025-09-09Fix
CVE-2025-58975Advanced Settings WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-09Fix
CVE-2025-58768DeepChat's Mermaid rendering has XSS leading to RCE9.7CNA v3.10.6%2025-09-09Fix
CVE-2025-58765wabac.js has XSS vulnerability in 404 error handling logic7.1CNA v3.10.3%2025-09-09Fix
CVE-2025-58763Tautulli vulnerable to authenticated remote code execution via command injection8.1CNA v3.11.7%2025-09-09Fix
CVE-2025-58762Tautulli vulnerable to authenticated remote code execution9.1CNA v3.10.8%2025-09-09Fix
CVE-2025-58761Tautulli vulnerable to unauthenticated path traversal in `real_pms_image_proxy`8.6CNA v3.10.7%2025-09-09Fix
CVE-2025-58760Tautulli vulnerable to unauthenticated path traversal in `/image` endpoint8.6CNA v3.10.6%2025-09-09Fix
CVE-2025-58759datahihi1 tiny-env TinyEnv: Inline comments not stripped properly in .env values5.1CNA v3.10.2%2025-09-09Fix
CVE-2025-58758datahihi1 tiny-env TinyEnv: Missing .env file not required may cause unexpected behavior5.1CNA v3.10.2%2025-09-09Fix
CVE-2025-58757Monai's unsafe use of Pickle deserialization may lead to RCE8.8CNA v3.10.6%2025-09-09Fix
CVE-2025-58756Monai's unsafe torch usage may lead to arbitrary code execution8.8CNA v3.10.8%2025-09-09Fix
CVE-2025-58755Monai has path traversal issue that may lead to arbitrary file writes8.8CNA v3.10.6%2025-09-09Fix
CVE-2025-58753copyparty file sharing missing authorization5.3CNA v4.00.4%2025-09-09Fix
CVE-2025-58750rAthena missing bound check in chclif_parse_moveCharSlot8.2CNA v3.10.3%2025-09-09Fix
CVE-2025-58462OPEXUS FOIAXpress PAL SQL injection9.3CNA v4.00.7%2025-09-09Fix
CVE-2025-58448rAthena has SQL injection in PartyBooking component via `WorldName` parameter9.1CNA v3.10.4%2025-09-09Fix
CVE-2025-58447rAthena has heap-based buffer overflow in login server9.8CNA v3.10.9%2025-09-09Fix
CVE-2025-58442Saleor has user enumeration vulnerability due to different error messages5.3CNA v3.10.3%2025-09-09Fix
CVE-2025-58435Open OnDemand didn't rotate password for VNC batch_connect4.1CNA v4.00.3%2025-09-09Fix
CVE-2025-58430listmonk vulnerable to CSRF to XSS Chain that can lead to admin account takeover8.6CNA v4.00.1%2025-09-09
CVE-2025-58215Ziston WordPress theme local file inclusion8.1CNA v3.10.4%2025-09-09Fix
CVE-2025-58180OctoPrint is vulnerable to RCE Attacks via Unsanitized Filename in file upload7.5CNA v4.022.1%2025-09-09Emerging ThreatsExploit codeFix
CVE-2025-58135Zoom Workplace Clients for Windows Improper Action Enforcement5.3CNA v3.10.3%2025-09-09Fix
CVE-2025-58134Zoom Workplace Clients for Windows incorrect authorization4.3CNA v3.10.2%2025-09-09Fix
CVE-2025-58131Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon race condition6.6CNA v3.10.1%2025-09-09
CVE-2025-58063CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion7.1CNA v3.10.4%2025-09-09Fix
CVE-2025-57665Element-plus open redirect6.4CISA ADP v3.10.2%2025-09-09
CVE-2025-57633FTP-Flask-python command injection9.8CISA ADP v3.11.4%2025-09-09
CVE-2025-57540Proxmox Virtual Environment stored cross-site scripting5.4CISA ADP v3.10.3%2025-09-09Fix
CVE-2025-57539Proxmox Virtual Environment stored cross-site scripting5.4CISA ADP v3.10.3%2025-09-09Fix
CVE-2025-57538Proxmox Virtual Environment stored cross-site scripting5.4CISA ADP v3.10.3%2025-09-09Fix
CVE-2025-57278LB-LINK Bl-cpe300m improper authentication8.8CISA ADP v3.10.4%2025-09-09
CVE-2025-57087Tenda W30E stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57086Tenda W30E stack-based buffer overflow7.5CISA ADP v3.10.4%2025-09-09
CVE-2025-57085Tenda W30E stack-based buffer overflow9.8CISA ADP v3.10.5%2025-09-09
CVE-2025-57078Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.4%2025-09-09
CVE-2025-57072Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57071Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57070Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57069Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57064Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57063Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57062Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57061Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57060Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57059Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57058Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-57057Tenda G3 stack-based buffer overflow7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-55730xwikisas xwiki-pro-macros XWiki Remote Macros vulnerable to remote code execution10.0CNA v3.10.7%2025-09-09Fix
CVE-2025-55729xwikisas xwiki-pro-macros XWiki Remote Macros vulnerable to remote code execution10.0CNA v3.10.7%2025-09-09Fix
CVE-2025-55728XWiki Remote Macros vulnerable to remote code execution using the panel macro10.0CNA v3.10.8%2025-09-09Fix
CVE-2025-55727XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro10.0CNA v3.11.0%2025-09-09Fix
CVE-2025-55317Microsoft AutoUpdate (MAU) elevation of privilege7.8CNA v3.10.4%2025-09-09Fix
CVE-2025-55316Microsoft Azure Connected Machine Agent elevation of privilege7.8CNA v3.10.4%2025-09-09Fix
CVE-2025-55245Microsoft Xbox Gaming Services elevation of privilege7.8CNA v3.10.4%2025-09-09Fix
CVE-2025-55243Microsoft OfficePlus spoofing7.5CNA v3.11.1%2025-09-09Fix
CVE-2025-55236Microsoft Windows graphics Kernel remote code execution7.3CNA v3.10.4%2025-09-09Fix
CVE-2025-55234Microsoft Windows SMB elevation of privilege8.8CNA v3.120.8%2025-09-09Exploit codeFix
CVE-2025-55232Microsoft High Performance Compute (HPC) Pack remote code execution9.8CNA v3.12.1%2025-09-09Fix
CVE-2025-55228Microsoft Windows Graphics component remote code execution7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-55227Microsoft SQL server elevation of privilege8.8CNA v3.11.4%2025-09-09Fix
CVE-2025-55226Microsoft Windows graphics Kernel remote code execution6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-55225Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-55224Microsoft Windows Hyper-V remote code execution7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-55223Microsoft Windows DirectX Graphics Kernel elevation of privilege7.0CNA v3.10.3%2025-09-09Fix
CVE-2025-55148Ivanti Connect Secure missing authorization7.6CNA v3.10.6%2025-09-09Fix
CVE-2025-55147Ivanti Connect Secure cross-site request forgery8.8CNA v3.10.6%2025-09-09Fix
CVE-2025-55146Ivanti Connect Secure unchecked return value4.9CNA v3.10.8%2025-09-09Fix
CVE-2025-55145Ivanti Connect Secure missing authorization8.9CNA v3.10.6%2025-09-09Fix
CVE-2025-55144Ivanti Connect Secure missing authorization5.4CNA v3.10.6%2025-09-09Fix
CVE-2025-55143Ivanti Connect Secure injection6.1CNA v3.10.7%2025-09-09Fix
CVE-2025-55142Ivanti Connect Secure missing authorization8.8CNA v3.10.9%2025-09-09Fix
CVE-2025-55141Ivanti Connect Secure missing authorization8.8CNA v3.10.9%2025-09-09Fix
CVE-2025-55139Ivanti Connect Secure server-side request forgery6.8CNA v3.10.9%2025-09-09Fix
CVE-2025-55054Baicells EG7035E-M11 cross-site scripting6.1CNA v3.10.2%2025-09-09
CVE-2025-55053Baicells NOVA430e/430i weak hash6.5CNA v3.10.2%2025-09-09
CVE-2025-55052Baicells NEUTRINO430 information disclosure4.3CNA v3.10.3%2025-09-09
CVE-2025-55051Baicells NOVA430e/430i default credentials10.0CNA v3.10.3%2025-09-09
CVE-2025-55050CWE-1242: Inclusion of Undocumented Features9.8CNA v3.10.3%2025-09-09
CVE-2025-55049Use of Default Cryptographic Key (CWE-1394)9.1CNA v3.10.3%2025-09-09
CVE-2025-55048Baicells NEUTRINO430 OS command injection9.8CNA v3.10.6%2025-09-09
CVE-2025-55047Baicells SPECTRA LTE-U eNB hard-coded credentials8.4CNA v3.10.1%2025-09-09
CVE-2025-54919Microsoft Windows Graphics component remote code execution7.5CNA v3.10.4%2025-09-09Fix
CVE-2025-54918Microsoft Windows NTLM elevation of privilege8.8CNA v3.125.3%2025-09-09Exploit codeFix
CVE-2025-54917Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.10.9%2025-09-09Fix
CVE-2025-54916Microsoft Windows NTFS remote code execution7.8CNA v3.12.3%2025-09-09Fix
CVE-2025-54915Microsoft Windows Defender Firewall service elevation of privilege6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-54913Microsoft Windows UI XAML Maps MapControlSettings elevation of privilege7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-54912Microsoft Windows BitLocker elevation of privilege7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-54911Microsoft Windows BitLocker elevation of privilege7.3CNA v3.10.7%2025-09-09Fix
CVE-2025-54910Microsoft Office remote code execution8.4CNA v3.10.6%2025-09-09Fix
CVE-2025-54908Microsoft PowerPoint remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54907Microsoft Office Visio remote code execution7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-54906Microsoft Office remote code execution7.8CNA v3.10.7%2025-09-09Fix
CVE-2025-54905Microsoft Word information disclosure7.1CNA v3.10.6%2025-09-09Fix
CVE-2025-54904Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54903Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54902Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54901Microsoft Excel information disclosure5.5CNA v3.10.6%2025-09-09Fix
CVE-2025-54900Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54899Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54898Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54897Microsoft SharePoint remote code execution8.8CNA v3.121.7%2025-09-09Fix
CVE-2025-54896Microsoft Excel remote code execution7.8CNA v3.10.6%2025-09-09Fix
CVE-2025-54895Microsoft Windows SPNEGO Extended Negotiation (NEGOEX) Security Mechanism elevation of privilege7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-54894Microsoft Windows local Security Authority subsystem service elevation of privilege7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-54709Sala WordPress theme local file inclusion8.1CNA v3.10.4%2025-09-09Fix
CVE-2025-54261Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)10.0CNA v3.125.3%2025-09-09Fix
CVE-2025-54260Adobe Substance3D Modeler out-of-bounds read7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-54259Adobe Substance3D Modeler integer overflow or wraparound7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-54258Adobe Substance3D Modeler use-after-free7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-54257Adobe Acrobat Reader use-after-free7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-54256Adobe Dreamweaver Desktop cross-site request forgery (CSRF)8.6CNA v3.10.2%2025-09-09Fix
CVE-2025-54255Adobe Acrobat Reader Violation of Secure Design Principles4.0CNA v3.10.3%2025-09-09Fix
CVE-2025-54252Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.15.3%2025-09-09Fix
CVE-2025-54251Adobe Experience Manager XML injection (aka blind XPath injection)4.3CNA v3.11.8%2025-09-09NucleiFix
CVE-2025-54250Adobe Experience Manager improper input validation4.9CNA v3.10.4%2025-09-09Fix
CVE-2025-54249Adobe Experience Manager server-side request forgery (SSRF)6.5CNA v3.12.0%2025-09-09NucleiFix
CVE-2025-54248Adobe Experience Manager improper input validation7.7CNA v3.16.5%2025-09-09Fix
CVE-2025-54247Adobe Experience Manager improper input validation6.5CNA v3.10.5%2025-09-09Fix
CVE-2025-54246Adobe Experience Manager incorrect authorization6.5CNA v3.10.4%2025-09-09Fix
CVE-2025-54245Adobe Substance3D Viewer out-of-bounds write7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-54244Adobe Substance3D Viewer heap-based buffer overflow7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-54243Adobe Substance3D Viewer out-of-bounds write7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-54242Adobe Premiere Pro use-after-free7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-54241Adobe After Effects out-of-bounds read5.5CNA v3.10.2%2025-09-09Fix
CVE-2025-54240Adobe After Effects out-of-bounds read5.5CNA v3.10.2%2025-09-09Fix
CVE-2025-54239Adobe After Effects out-of-bounds read5.5CNA v3.10.2%2025-09-09Fix
CVE-2025-54236Adobe Commerce and Magento improper input validation9.1CNA v3.194.7%2025-09-09KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-54116Microsoft Windows MultiPoint services elevation of privilege7.3CNA v3.10.5%2025-09-09Fix
CVE-2025-54115Microsoft Windows Hyper-V elevation of privilege7.0CNA v3.10.4%2025-09-09Fix
CVE-2025-54114Microsoft Windows Connected Devices Platform service elevation of privilege7.0CNA v3.10.3%2025-09-09Fix
CVE-2025-54113Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.9%2025-09-09Fix
CVE-2025-54112Microsoft Virtual Hard Disk elevation of privilege7.0CNA v3.10.4%2025-09-09Fix
CVE-2025-54111Microsoft Windows UI XAML Phone DatePickerFlyout elevation of privilege7.8CNA v3.10.4%2025-09-09Fix
CVE-2025-54110Microsoft Windows Kernel elevation of privilege8.8CNA v3.14.2%2025-09-09Exploit codeFix
CVE-2025-54109Microsoft Windows Defender Firewall service elevation of privilege6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-54108Microsoft Windows capability Access Management service (camsvc) elevation of privilege7.0CNA v3.10.3%2025-09-09Fix
CVE-2025-54107Microsoft Windows MapUrlToZone security feature bypass4.3CNA v3.10.9%2025-09-09Fix
CVE-2025-54106Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.4%2025-09-09Fix
CVE-2025-54105Microsoft Brokering File System elevation of privilege7.0CNA v3.10.3%2025-09-09Fix
CVE-2025-54104Microsoft Windows Defender Firewall service elevation of privilege6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-54103Microsoft Windows Management service elevation of privilege7.4CNA v3.10.4%2025-09-09Fix
CVE-2025-54102Microsoft Windows Connected Devices Platform service elevation of privilege7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-54101Microsoft Windows SMB client remote code execution4.8CNA v3.12.6%2025-09-09Fix
CVE-2025-54099Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.4%2025-09-09Fix
CVE-2025-54098Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.12.8%2025-09-09Fix
CVE-2025-54097Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-54096Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-54095Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-54094Microsoft Windows Defender Firewall service elevation of privilege6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-54093Microsoft Windows TCP/IP driver elevation of privilege7.0CNA v3.10.4%2025-09-09Fix
CVE-2025-54092Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-54091Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-54084Calix Gigacenter ONT command injection8.5CNA v4.00.8%2025-09-09
CVE-2025-54083Calix GigaCenter ONT firmware sensitive information disclosure5.1CNA v4.00.2%2025-09-09
CVE-2025-53914Calix GigaCenter ONT (Broadcom SoC) Excessive Privileges7.0CNA v4.00.2%2025-09-09
CVE-2025-53913Calix GigaCenter ONT (Quantenna SoC) Excessive Privileges7.0CNA v4.00.2%2025-09-09
CVE-2025-53810Microsoft Windows Defender Firewall service elevation of privilege6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-53809Microsoft Windows Local Security Authority subsystem Service (LSASS) denial of service6.5CNA v3.11.5%2025-09-09Fix
CVE-2025-53808Microsoft Windows Defender Firewall service elevation of privilege6.7CNA v3.10.5%2025-09-09Fix
CVE-2025-53807Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.3%2025-09-09Fix
CVE-2025-53806Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-53805Microsoft Windows HTTP.sys denial of service7.5CNA v3.11.4%2025-09-09Fix
CVE-2025-53804Microsoft Windows Kernel-Mode driver information disclosure5.5CNA v3.10.7%2025-09-09Fix
CVE-2025-53803Microsoft Windows Kernel Memory information disclosure5.5CNA v3.10.7%2025-09-09Fix
CVE-2025-53802Microsoft Windows Bluetooth service elevation of privilege7.0CNA v3.10.4%2025-09-09Fix
CVE-2025-53801Microsoft DWM Core library elevation of privilege7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-53800Microsoft Windows Graphics component elevation of privilege7.8CNA v3.10.5%2025-09-09Fix
CVE-2025-53799Windows Imaging component information disclosure5.5CNA v3.10.8%2025-09-09Fix
CVE-2025-53798Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-53797Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-53796Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.2%2025-09-09Fix
CVE-2025-53609Fortinet FortiWeb relative path traversal4.7CNA v3.110.6%2025-09-09Fix
CVE-2025-53348Kalium WordPress theme broken access control5.3CNA v3.10.3%2025-09-09Fix
CVE-2025-53340Awesome Support WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-09-09Fix
CVE-2025-53303ThemeMove Core WordPress plugin PHP object injection8.8CNA v3.10.4%2025-09-09
CVE-2025-53291Spreadconnect WordPress plugin broken access control5.4CNA v3.10.3%2025-09-09Fix
CVE-2025-52915K7 Security Anti-Malware K7RKScan.sys driver improper privilege management7.2CISA ADP v3.10.5%2025-09-09Exploit code
CVE-2025-52322Open5GS denial of service7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-52277YesWiki cross-site scripting6.1CISA ADP v3.10.4%2025-09-09
CVE-2025-49860Majestic Support WordPress plugin broken access control5.3CNA v3.10.3%2025-09-09Fix
CVE-2025-49734Microsoft PowerShell direct elevation of privilege7.0CNA v3.10.3%2025-09-09Fix
CVE-2025-49692Microsoft Azure Connected Machine Agent elevation of privilege7.8CNA v3.10.3%2025-09-09Fix
CVE-2025-49461Zoom Workplace Clients cross-site scripting4.3CNA v3.10.3%2025-09-09Fix
CVE-2025-49460Zoom Workplace Clients argument injection4.3CNA v3.10.3%2025-09-09Fix
CVE-2025-49459Zoom Workplace for Windows on ARM missing authorization7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-49458Zoom Workplace Clients buffer overflow6.5CNA v3.10.3%2025-09-09Fix
CVE-2025-49430Ultimate Video Player WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.2%2025-09-09
CVE-2025-48208Apache HertzBeat (incubating): Jmx JNDI injection8.8v3.10.6%2025-09-09Fix
CVE-2025-48101Constant Contact for WordPress plugin PHP object injection8.8CNA v3.10.3%2025-09-09
CVE-2025-47997Microsoft SQL server information disclosure6.5CNA v3.10.8%2025-09-09Fix
CVE-2025-47695Blog Designer PRO WordPress plugin authenticated Non-arbitrary local file inclusion7.5CNA v3.10.5%2025-09-09
CVE-2025-47694Blog Designer PRO WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-09-09
CVE-2025-47579Photography WordPress theme PHP object injection8.1NVD v3.10.3%2025-09-09
CVE-2025-47571Super Store Finder WordPress plugin local file inclusion7.5CNA v3.10.5%2025-09-09Fix
CVE-2025-47570WooCommerce Photo Reviews WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-09-09
CVE-2025-47569WooCommerce Ultimate Gift Card WordPress plugin SQL injection9.3CNA v3.10.6%2025-09-09Fix
CVE-2025-47437LiteSpeed Cache WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.3%2025-09-09Fix
CVE-2025-47416Crestron TouchScreen X70 and X60s ConsoleFindCommandMatchList function incorrect comparison5.9CNA v4.00.4%2025-09-09Fix
CVE-2025-47415Crestron TOUCHSCREENS x60, x70 series RECWAVE Filepath Traversal6.8CNA v4.00.5%2025-09-09Fix
CVE-2025-44595halo cross-site scripting6.1CISA ADP v3.10.2%2025-09-09
CVE-2025-44594halo server-side request forgery9.1CISA ADP v3.10.4%2025-09-09
CVE-2025-44593halo cross-site scripting6.1CISA ADP v3.10.3%2025-09-09
CVE-2025-43786Liferay Portal exposes ERC which can lead to exploit the time response attack6.9CNA v4.00.3%2025-09-09Fix
CVE-2025-43781Liferay Portal is vulnerable to XSS attack through its search bar portlet5.3CNA v4.00.2%2025-09-09Fix
CVE-2025-43778Liferay Portal is vulnerable to XSS attack through fieldset name in Kaleo Forms Admin4.8CNA v4.00.2%2025-09-09Fix
CVE-2025-43777Liferay Portal exposes 500 status when attempting login with a deleted client secret5.1CNA v4.00.2%2025-09-09Fix
CVE-2025-43776Liferay Portal and Liferay DXP vulnerable to store cross-site scripting4.6CNA v4.00.2%2025-09-09Fix
CVE-2025-43775Liferay Portal is vulnerable to XSS attacks via its remote app title field4.6CNA v4.00.2%2025-09-09Fix
CVE-2025-43763Liferay Portal is vulnerable to SSRF through custom object attachment fields4.8CNA v4.00.2%2025-09-09Fix
CVE-2025-43491Poly Lens Desktop application privilege escalation7.3CNA v4.00.3%2025-09-09Fix
CVE-2025-42958Missing authentication check in SAP NetWeaver9.1CNA v3.10.7%2025-09-09Fix
CVE-2025-42944Insecure deserialization vulnerability in SAP Netweaver (RMI-P4)10.0CNA v3.13.0%2025-09-09Fix
CVE-2025-42938Cross-site scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform6.1CNA v3.10.2%2025-09-09Fix
CVE-2025-42933Insecure storage of sensitive information in SAP Business One (SLD)8.8CNA v3.10.3%2025-09-09Fix
CVE-2025-42930Denial of service (DoS) vulnerability in SAP Business Planning and Consolidation6.5CNA v3.10.3%2025-09-09Fix
CVE-2025-42929Missing input validation vulnerability in SAP Landscape Transformation Replication Server8.1CNA v3.10.2%2025-09-09Fix
CVE-2025-42927Information disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java3.4CNA v3.10.1%2025-09-09Fix
CVE-2025-42926Missing authentication check in SAP NetWeaver Application Server Java5.3CNA v3.10.3%2025-09-09Fix
CVE-2025-42925Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP service)4.3CNA v3.10.2%2025-09-09Fix
CVE-2025-42923Cross-site request forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)4.3CNA v3.10.1%2025-09-09Fix
CVE-2025-42922Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web service)9.9CNA v3.10.7%2025-09-09Fix
CVE-2025-42920Cross-site scripting (XSS) vulnerability in SAP Supplier Relationship Management6.1CNA v3.10.3%2025-09-09Fix
CVE-2025-42918Missing authorization check in SAP NetWeaver Application Server for ABAP (Background Processing)4.3CNA v3.10.2%2025-09-09Fix
CVE-2025-42917Missing authorization check in SAP HCM (Approve Timesheets Fiori application)6.5CNA v3.10.2%2025-09-09Fix
CVE-2025-42916Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)8.1CNA v3.10.3%2025-09-09Fix
CVE-2025-42915Missing authorization Check in Fiori app (Manage Payment blocks)5.4CNA v3.10.2%2025-09-09Fix
CVE-2025-42914Missing authorization check in SAP HCM (My Timesheet Fiori application)3.1CNA v3.10.2%2025-09-09Fix
CVE-2025-42913Missing authorization check in SAP HCM (My Timesheet Fiori application)3.1CNA v3.10.2%2025-09-09Fix
CVE-2025-42912Missing authorization check in SAP HCM (My Timesheet Fiori application)6.5CNA v3.10.2%2025-09-09Fix
CVE-2025-42911Missing authorization check in SAP NetWeaver (Service Data Download)5.0CNA v3.10.2%2025-09-09Fix
CVE-2025-41701Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering7.8CNA v3.10.2%2025-09-09Fix
CVE-2025-40804Siemens SIMATIC Virtualization as a Service (SIVaaS) incorrect permission assignment9.3CNA v4.00.4%2025-09-09Fix
CVE-2025-40803Siemens RUGGEDCOM RST2428P information disclosure2.3CNA v4.00.2%2025-09-09
CVE-2025-40802Siemens RUGGEDCOM RST2428P resource exhaustion2.3CNA v4.00.2%2025-09-09
CVE-2025-40798Siemens SIMATIC PCS neo out-of-bounds read8.7CNA v4.00.5%2025-09-09Fix
CVE-2025-40797Siemens SIMATIC PCS neo out-of-bounds read8.7CNA v4.00.5%2025-09-09Fix
CVE-2025-40796Siemens SIMATIC PCS neo out-of-bounds read8.7CNA v4.00.5%2025-09-09Fix
CVE-2025-40795Siemens SIMATIC PCS neo stack-based buffer overflow9.3CNA v4.00.7%2025-09-09Fix
CVE-2025-40757Siemens APOGEE PXC Series (BACnet) information disclosure6.3CNA v4.00.3%2025-09-09
CVE-2025-40594Siemens SINAMICS G220 improper privilege management6.9CNA v4.00.2%2025-09-09Fix
CVE-2025-39553Church Admin WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-09-09Fix
CVE-2025-39541WP Simple Booking Calendar WordPress plugin broken access control6.5CNA v3.10.3%2025-09-09Fix
CVE-2025-39523GoodBarber WordPress plugin open redirection4.7CNA v3.10.3%2025-09-09Fix
CVE-2025-36125IBM Hardware Management Console Power Systems cross-site scripting6.4CNA v3.10.2%2025-09-09Fix
CVE-2025-36011IBM Jazz for Service Management information disclosure4.3CNA v3.10.2%2025-09-09Fix
CVE-2025-34178Netgate pfSense CE Suricata package stored cross-site scripting5.4v3.15.5%2025-09-09
CVE-2025-34177Netgate pfSense CE Suricata package stored cross-site scripting5.4v3.10.9%2025-09-09
CVE-2025-34176Netgate pfSense CE Suricata Package directory traversal information disclosure4.3v3.117.3%2025-09-09
CVE-2025-34175Netgate pfSense CE Suricata package reflected cross-site scripting6.1v3.121.3%2025-09-09
CVE-2025-34174Netgate pfSense CE Status_Traffic_Totals Package stored cross-site scripting5.4v3.114.5%2025-09-09
CVE-2025-34173Netgate pfSense CE Snort package directory traversal information disclosure4.3v3.10.9%2025-09-09
CVE-2025-34172Netgate pfSense CE HAProxy Package 0.63_10 reflected cross-site scripting6.1v3.11.1%2025-09-09
CVE-2025-33045AMI AptioV Legacy Serial Redirection SMRAM vulnerabilities8.2CNA v3.10.2%2025-09-09Fix
CVE-2025-32689WP SmartPay for WordPress Input vulnerability improper input validation7.5CNA v3.10.3%2025-09-09
CVE-2025-32688Target Video Easy Publish WordPress plugin arbitrary code execution5.4CNA v3.10.2%2025-09-09
CVE-2025-32486Material Dashboard WordPress plugin privilege escalation9.8CNA v3.10.3%2025-09-09Fix
CVE-2025-30875WP Weixin WordPress theme cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-09Fix
CVE-2025-29089TP-Link AX10 information disclosure7.5CISA ADP v3.10.5%2025-09-09
CVE-2025-24404Apache HertzBeat (incubating): RCE by parse HTTP sitemap XML response8.8v3.10.5%2025-09-09Fix
CVE-2025-23344NVIDIA NVDebug tool OS command injection7.3CNA v3.10.5%2025-09-09Fix
CVE-2025-23343NVIDIA NVDebug tool path traversal7.6CNA v3.10.8%2025-09-09Fix
CVE-2025-23342NVIDIA NVDebug tool insufficiently protected credentials8.2CNA v3.10.3%2025-09-09Fix
CVE-2025-10199A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows7.8CISA ADP v3.10.2%2025-09-09
CVE-2025-10198LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability7.8CISA ADP v3.10.2%2025-09-09
CVE-2025-10183XML external entity injection in TecConnect9.1CNA v3.10.4%2025-09-09
CVE-2025-10172UTT 750W formPictureUrl buffer overflow8.7CNA v4.01.1%2025-09-09
CVE-2025-10171UTT 1250GW formConfigApConfTemp sub_453DC buffer overflow8.7CNA v4.01.1%2025-09-09
CVE-2025-10170UTT 1200GW formApLbConfig sub_4B48F8 buffer overflow8.7CNA v4.01.1%2025-09-09
CVE-2025-10169UTT 1200GW ConfigWirelessBase buffer overflow8.7CNA v4.07.4%2025-09-09
CVE-2025-10164lmsys sglang update_weights_from_tensor main deserialization6.9CNA v4.00.4%2025-09-09Fix
CVE-2025-10159Sophos AP6 Series Wireless Access Points unverified password change9.8CNA v3.10.9%2025-09-09Fix
CVE-2025-10134Goza WordPress theme arbitrary file deletion9.1CNA v3.10.6%2025-09-09Fix
CVE-2025-10123D-Link DIR-823X set_static_leases sub_415028 command injection9.8v3.14.7%2025-09-09
CVE-2025-10122Maccms10 Database.php rep SQL injection7.2v3.10.3%2025-09-09
CVE-2025-10121uverif kami_list addbatch SQL injection5.3CNA v4.00.3%2025-09-09
CVE-2025-10120Tenda AC20 GetParentControlInfo strcpy buffer overflow8.7CNA v4.00.9%2025-09-09
CVE-2025-10118itsourcecode E-Logbook with Health Monitoring System for COVID-19 login.php SQL injection9.8v3.10.5%2025-09-09
CVE-2025-10117SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross-site scripting5.4v3.10.3%2025-09-09
CVE-2025-10116SiempreCMS file_upload.php unrestricted upload6.9CNA v4.00.5%2025-09-09
CVE-2025-10115SiempreCMS user_search_ajax.php SQL injection6.9CNA v4.00.3%2025-09-09
CVE-2025-10114PHPGurukul Small CRM profile.php SQL injection9.8v3.10.4%2025-09-09
CVE-2025-10113itsourcecode Student Information Management System index.php SQL injection9.8v3.10.4%2025-09-09
CVE-2025-10112itsourcecode Student Information Management System index.php SQL injection9.8v3.10.4%2025-09-09
CVE-2025-10107TRENDnet TEW-831DR formSysCmd command injection5.1CNA v4.03.8%2025-09-09
CVE-2025-10095SQL injection in SMPP component of SMSEagle firmware5.3CNA v4.00.2%2025-09-09Fix
CVE-2025-9997Schneider Electric Saitel DR RTU OS command injection5.8CNA v4.00.5%2025-09-09Fix
CVE-2025-9996Schneider Electric Saitel DR RTU OS command injection5.8CNA v4.00.5%2025-09-09Fix
CVE-2025-9994Amp’ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not require authentication9.8CISA ADP v3.10.5%2025-09-09
CVE-2025-9951Remote code execution via heap buffer overflow in FFmpeg JPEG20007.2CNA v4.00.4%2025-09-09Fix
CVE-2025-9872Ivanti Endpoint Manager unrestricted file upload8.8CNA v3.115.8%2025-09-09Fix
CVE-2025-9712Ivanti Endpoint Manager unrestricted file upload8.8CNA v3.123.9%2025-09-09Fix
CVE-2025-9542AutomatorWP WordPress plugin authenticated (Subscriber+) missing authorization to Multiple Functions5.4CNA v3.10.2%2025-09-09Fix
CVE-2025-9539AutomatorWP WordPress plugin unauthorized access8.0CNA v3.10.5%2025-09-09Fix
CVE-2025-9489WP-Members Membership WordPress plugin arbitrary shortcode execution via Profile Names5.0CNA v3.10.3%2025-09-09Fix
CVE-2025-9364Rockwell Automation FactoryTalk Analytics LogixAI Redis database information disclosure8.7CNA v4.00.3%2025-09-09Fix
CVE-2025-9269Lexmark CX server-side request forgery (SSRF) vulnerability found in embedded web server6.9CNA v4.00.3%2025-09-09Fix
CVE-2025-9166Rockwell Automation ControlLogix® 5580 denial of service8.2CNA v4.00.4%2025-09-09Fix
CVE-2025-9161Rockwell Automation FactoryTalk Optix remote code execution7.3CNA v4.00.6%2025-09-09Fix
CVE-2025-9160Rockwell Automation CompactLogix® 5480 code execution7.0CNA v4.00.2%2025-09-09
CVE-2025-9111WPBOT WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-09-09Fix
CVE-2025-9065Rockwell Automation ThinManager® server-side request forgery8.6CNA v4.00.5%2025-09-09
CVE-2025-9061Wilmer Core WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.2%2025-09-09Fix
CVE-2025-9058Mikado Core WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.2%2025-09-09Fix
CVE-2025-8889Compress Then Upload WordPress plugin Admin+ arbitrary file upload3.8CISA ADP v3.10.3%2025-09-09Fix
CVE-2025-8712Ivanti Connect Secure missing authorization5.4CNA v3.10.5%2025-09-09Fix
CVE-2025-8711Ivanti Connect Secure cross-site request forgery5.4CNA v3.10.3%2025-09-09Fix
CVE-2025-8277Red Hat Enterprise Linux 9 libssh: Memory exhaustion via repeated key exchange in libssh3.1CNA v3.10.4%2025-09-09Fix
CVE-2025-8008Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT vulnerability7.1CNA v4.00.7%2025-09-09Fix
CVE-2025-8007Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT vulnerability7.1CNA v4.00.2%2025-09-09Fix
CVE-2025-7970Rockwell Automation FactoryTalk Activation Manager missing encryption8.7CNA v4.00.4%2025-09-09Fix
CVE-2025-7746Schneider Electric ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives cross-site scripting5.3CNA v4.00.4%2025-09-09Fix
CVE-2025-7635Calix GigaCenter ONT Telnet service missing authentication7.7v3.10.4%2025-09-09
CVE-2025-7350Rockwell Automation Stratix® IOS cross-site request forgery to code execution8.6CNA v4.00.6%2025-09-09Fix
CVE-2025-5500ZhenShi Mibro Fit App AndroidManifest.xml vulnerability4.8CNA v4.00.1%2025-09-09
CVE-2025-5005Shanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery6.9CNA v4.00.5%2025-09-09
CVE-2025-59033Microsoft Windows unprotected alternate channel6.7CISA ADP v3.10.3%2025-09-08Fix
CVE-2025-58782Apache Jackrabbit: Core and JCR Commons are vulnerable to deserialization of untrusted data6.5CISA ADP v3.11.3%2025-09-08Fix
CVE-2025-58752Vite's `server.fs` settings were not applied to HTML files2.3CNA v4.00.6%2025-09-08Fix
CVE-2025-58751Vite middleware may serve files starting with the same name with the public directory2.3CNA v4.01.2%2025-09-08NucleiFix
CVE-2025-58746Volkov Labs Business Links Link URL field privilege escalation9.1CNA v3.10.3%2025-09-08Fix
CVE-2025-58745WeGIA has a bypass for the fix for arbitrary file upload leads to remote code execution (RCE)10.0CNA v3.10.8%2025-09-08Fix
CVE-2025-58454WeGIA listar_despachos.php SQL injection8.9CNA v4.00.4%2025-09-08Fix
CVE-2025-58453WeGIA vulnerable to Blind Time-based SQL injection in endpoint exibe_anexo.php parameter id_anexo8.9CNA v4.00.4%2025-09-08Fix
CVE-2025-58452WeGIA listar_despachos.php reflected cross-site scripting2.1CNA v4.00.2%2025-09-08Fix
CVE-2025-58451Cattown is vulnerable to uncontrolled resource consumption8.7CNA v4.00.3%2025-09-08Fix
CVE-2025-58450pREST has Systemic SQL injection9.3CNA v4.00.4%2025-09-08Fix
CVE-2025-58449Maho vulnerable to authenticated remote code execution via file upload8.7CNA v4.00.3%2025-09-08Fix
CVE-2025-58444MCP Inspector is vulnerable to potential command execution8.6CNA v4.00.7%2025-09-08Fix
CVE-2025-58422RICOH Streamline NX use of a less trusted source2.3CNA v4.00.1%2025-09-08
CVE-2025-58365xwiki-contrib application-blog XWiki Blog Application: Privilege escalation from account8.7CNA v4.00.6%2025-09-08Fix
CVE-2025-57817Fides Webserver API is vulnerable to OAuth client privilege escalation8.6CNA v4.00.4%2025-09-08Fix
CVE-2025-57816Fides Webserver API Rate Limiting vulnerability in Proxied Environments6.3CNA v4.00.4%2025-09-08Fix
CVE-2025-57815Fides lacks brute-force Protections on Authentication endpoints1.7CNA v4.00.3%2025-09-08Fix
CVE-2025-57766Fides's Admin UI User Password Change Does not Invalidate Current Session1.7CNA v4.00.3%2025-09-08Fix
CVE-2025-57285CodeceptJS's incomprehensive sanitation can lead to command injection9.8CISA ADP v3.12.2%2025-09-08Fix
CVE-2025-57141Ruisitech Ruisibi code injection9.8CISA ADP v3.10.8%2025-09-08
CVE-2025-56630FoxCMS SQL injection7.3CISA ADP v3.10.2%2025-09-08
CVE-2025-56267Avigilon Access Control Manager /id_profiles endpoint CSV injection9.8CISA ADP v3.10.7%2025-09-08
CVE-2025-56266Avigilon Access Control Manager host header injection9.8CISA ADP v3.12.9%2025-09-08Nuclei
CVE-2025-56265N8N's Chat Trigger component is vulnerable to XSS8.8CISA ADP v3.10.6%2025-09-08Fix
CVE-2025-55998Mezereon Smart Search And Filter cross-site scripting8.1CISA ADP v3.10.4%2025-09-08
CVE-2025-55849WeiPHP SQL injection8.4CISA ADP v3.10.2%2025-09-08
CVE-2025-54994@akoskm/create-mcp-server-stdio has command injection in MCP Server due to unsafe `exec` API9.3CNA v4.01.3%2025-09-08Fix
CVE-2025-53838LinkAce has a Stored One Click XSS8.4CNA v4.00.3%2025-09-08Fix
CVE-2025-52389Envasadora H2O Eireli Soda Cristal insecure direct object reference8.8CISA ADP v3.10.4%2025-09-08
CVE-2025-52288Open5GS reachable assertion7.5CISA ADP v3.10.5%2025-09-08
CVE-2025-52161Scholl Weblication Cms cross-site scripting9.8CISA ADP v3.10.4%2025-09-08
CVE-2025-51586PrestaShop presta Shop vulnerable to email enumeration3.7CISA ADP v3.10.8%2025-09-08NucleiExploit codeFix
CVE-2025-43722Dell PowerScale OneFS improper privilege management6.7CNA v3.10.1%2025-09-08Fix
CVE-2025-41708Bender CC612 cleartext transmission of Sensitive Data via Insecure HTTP Web interface7.4CNA v3.10.2%2025-09-08
CVE-2025-41682Bender CC612 credential disclosure via Insecure Storage on Charge controller8.8CNA v3.10.3%2025-09-08Fix
CVE-2025-41664WAGO Coupler FTP and SFTP services incorrect permission assignment7.5CNA v3.10.2%2025-09-08Fix
CVE-2025-40930JSON::SIMD JSON parser buffer overflow7.5CISA ADP v3.10.7%2025-09-08Fix
CVE-2025-40929Cpanel::JSON::XS JSON parser buffer overflow5.6CISA ADP v3.10.4%2025-09-08Fix
CVE-2025-40928JSON::XS JSON parser buffer overflow7.5CISA ADP v3.10.6%2025-09-08Fix
CVE-2025-40642Reflected cross-site scripting (XSS) in WebWork5.1CNA v4.00.5%2025-09-08
CVE-2025-40641Stored cross-site scripting (XSS) in the Multi-Purpose Inventory Management System5.1CNA v4.00.4%2025-09-08
CVE-2025-36855Microsoft EOL .NET Runtime remote code execution8.8CNA v3.10.8%2025-09-08Fix
CVE-2025-36854Microsoft NET EOL ASP.NET remote code execution8.1CNA v3.10.6%2025-09-08Fix
CVE-2025-36853Microsoft EOL .NET Runtime remote code execution7.5CNA v3.10.6%2025-09-08Fix
CVE-2025-22956OPSI ProductPropertyState retrieval information disclosure9.8CISA ADP v3.10.4%2025-09-08
CVE-2025-10111itsourcecode Student Information Management System index.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10110ChanCMS search SQL injection8.8v3.10.3%2025-09-08
CVE-2025-10109Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10108Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.5%2025-09-08
CVE-2025-10106yanyutao0402 ChanCMS search SQL injection8.8v3.10.4%2025-09-08
CVE-2025-10105yanyutao0402 ChanCMS search SQL injection8.8v3.10.3%2025-09-08
CVE-2025-10104code-projects Online Event Judging System review_search.php SQL injection9.8v3.10.5%2025-09-08
CVE-2025-10103code-projects Online Event Judging System home.php SQL injection9.8v3.10.5%2025-09-08
CVE-2025-10102code-projects Online Event Judging System index.php SQL injection9.8v3.10.5%2025-09-08
CVE-2025-10100SourceCodester Simple Forum Discussion System admin_class.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10099Portabilis i-Educar Editar usuário educar_usuario_cad.php cross-site scripting4.8NVD v3.10.3%2025-09-08
CVE-2025-10098PHPGurukul User Management System edit-user-profile.php SQL injection8.8v3.10.5%2025-09-08
CVE-2025-10097SimStudioAI Sim route.ts code injection9.8NVD v3.10.8%2025-09-08
CVE-2025-10096SimStudioAI Sim route.ts server-side request forgery6.5v3.10.3%2025-09-08
CVE-2025-10093D-Link DIR-852 Device Configuration getcfg.php phpcgi_main information disclosure7.5v3.11.0%2025-09-08
CVE-2025-10092Jinher OA XML type XML external entity reference9.8v3.10.5%2025-09-08
CVE-2025-10091Jinher OA XML type XML external entity reference9.8NVD v3.10.5%2025-09-08
CVE-2025-10090Jinher OA GetTreeDate.aspx SQL injection9.8v3.11.8%2025-09-08Reported exploitedNuclei
CVE-2025-10088SourceCodester Time Tracker index.html cross-site scripting5.4v3.10.3%2025-09-08
CVE-2025-10087SourceCodester Pet Grooming Management Software profit_report.php SQL injection7.2v3.10.4%2025-09-08
CVE-2025-10086fuyang_lipengjun platform AdPositionController queryAll improper authorization5.3CNA v4.00.3%2025-09-08
CVE-2025-10085SourceCodester Pet Grooming Management Software manage_website.php unrestricted upload8.8v3.10.4%2025-09-08
CVE-2025-10084elunez Eladmin SysLogController 1 queryErrorLogDetail improper authorization5.3CNA v4.00.3%2025-09-08
CVE-2025-10083SourceCodester Pet Grooming Management Software profile.php unrestricted upload8.8v3.10.4%2025-09-08
CVE-2025-10082SourceCodester Online Polling System manage-admins.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10081SourceCodester Pet Management System profile.php unrestricted upload7.2v3.10.5%2025-09-08
CVE-2025-10080running-elephant Datart API AESUtil.java getTokensecret hard-coded key2.3CNA v4.00.3%2025-09-08
CVE-2025-10079PHPGurukul Small CRM get-quote.php SQL injection9.8NVD v3.10.4%2025-09-08
CVE-2025-10078SourceCodester Online Polling System candidates.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10077SourceCodester Online Polling System registeracc.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10076SourceCodester Online Polling System manage-profile.php SQL injection9.8v3.10.4%2025-09-08
CVE-2025-10075SourceCodester Online Polling System manage-profile.php cross-site scripting5.4v3.10.3%2025-09-08
CVE-2025-10074Portabilis i-Educar tipos cross-site scripting5.4NVD v3.10.3%2025-09-08
CVE-2025-10073Portabilis i-Educar turma improper authorization5.3CNA v4.00.4%2025-09-08
CVE-2025-9114Doccure WordPress theme unauthenticated arbitrary user password Change9.8CNA v3.10.4%2025-09-08Fix
CVE-2025-9113Doccure Core WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.6%2025-09-08Fix
CVE-2025-9112Doccure WordPress theme authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.6%2025-09-08Fix
CVE-2025-8085Ditty WordPress plugin unauthenticated SSRF8.6CISA ADP v3.119.6%2025-09-08NucleiFix
CVE-2025-7709Out-of-bounds write in FTS5 extension in SQLite6.9CNA v4.00.4%2025-09-08Fix
CVE-2025-5993Path traversal in ITCube CRM9.2CNA v4.00.6%2025-09-08
CVE-2025-3212Mali GPU Kernel Driver allows access to already freed memory5.3CISA ADP v3.10.3%2025-09-08Fix
CVE-2025-1761IBM Concert Software information disclosure5.9CNA v3.10.4%2025-09-08Fix
CVE-2025-48042Before action, Ash's hooks may execute in certain scenarios despite a request being forbidden7.1CNA v4.00.3%2025-09-07Fix
CVE-2025-39734Linux kernel NTFS3 inode locking deadlock5.5v3.10.1%2025-09-07Fix
CVE-2025-39733In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various ordering issues for lower instance locks and team lock. Switch to using rtnl lock for protecting team device, similar to bonding. Based on the patch by Tetsuo Handa.5.5v3.10.1%2025-09-07Fix
CVE-2025-39732Linux kernel ath11k Wi-Fi driver vulnerability7.8CNA v3.10.2%2025-09-07Fix
CVE-2025-39731Linux kernel f2fs decompression memory release vulnerability5.5v3.10.1%2025-09-07Fix
CVE-2025-39730Linux kernel NFS filehandle handling vulnerability7.8v3.10.2%2025-09-07Fix
CVE-2025-39729Linux kernel CCP SEV platform driver vulnerability5.5v3.10.1%2025-09-07Fix
CVE-2025-39727Linux kernel swap cluster setup buffer overflow7.8v3.10.2%2025-09-07Fix
CVE-2025-36100IBM MQ information disclosure5.1CNA v3.10.1%2025-09-07Fix
CVE-2025-10072Portabilis i-Educar enturmar access control5.3CNA v4.00.3%2025-09-07
CVE-2025-10071Portabilis i-Educar cancelar-enturmacao-em-lote access control5.3CNA v4.00.4%2025-09-07
CVE-2025-10070Portabilis i-Educar enturmacao-em-lote access control5.3CNA v4.00.4%2025-09-07
CVE-2025-10068itsourcecode Online Discussion Forum add_views.php SQL injection9.8NVD v3.10.4%2025-09-07
CVE-2025-10067itsourcecode POS Point Of Sale System empty_table.php cross-site scripting6.1NVD v3.10.4%2025-09-07
CVE-2025-10066itsourcecode POS Point Of Sale System dymanic_table.php cross-site scripting6.1v3.10.4%2025-09-07
CVE-2025-10065itsourcecode POS Point Of Sale System dom_data_th.php cross-site scripting6.1v3.10.4%2025-09-07
CVE-2025-10064itsourcecode POS Point Of Sale System dom_data_two_headers.php cross-site scripting6.1v3.10.4%2025-09-07
CVE-2025-58446xgrammar vulnerable to denial of service by huge enum grammar6.9CNA v4.00.5%2025-09-06Fix
CVE-2025-58445Atlantis exposes Service Version Publicly on /status API endpoint6.9CNA v4.00.5%2025-09-06
CVE-2025-58443fogproject FOG's authentication bypass leads to full SQL DB dump9.9CNA v4.020.9%2025-09-06NucleiExploit code
CVE-2025-58439frappe erpnext ERP: Possibility of SQL injection due to missing validation8.1CNA v3.10.3%2025-09-06Fix
CVE-2025-58438internetarchive is vulnerable to directory traversal through file downloads9.4CNA v4.01.5%2025-09-06Fix
CVE-2025-58437Coder's privilege escalation vulnerability could lead to a cross workspace compromise8.1CNA v3.10.4%2025-09-06Fix
CVE-2025-58374Roo Code auto-approve command list command injection7.8CNA v3.10.2%2025-09-06Fix
CVE-2025-10063itsourcecode POS Point Of Sale System deferred_table.php cross-site scripting6.1NVD v3.10.4%2025-09-06
CVE-2025-10062itsourcecode Student Information Management System login.php SQL injection9.8v3.10.4%2025-09-06
CVE-2025-10046ELEX WooCommerce Google Shopping (Google Product Feed) WordPress plugin SQL Inejction4.9CNA v3.10.7%2025-09-06Exploit codeFix
CVE-2025-10034D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow9.8NVD v3.11.0%2025-09-06
CVE-2025-10033itsourcecode Online Discussion Forum admin SQL injection9.8v3.10.4%2025-09-06
CVE-2025-10032Campcodes Grocery Sales and Inventory System index.php cross-site scripting6.1v3.10.4%2025-09-06
CVE-2025-10031Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.5%2025-09-06
CVE-2025-10030Campcodes Grocery Sales and Inventory System ajax.php SQL injection9.8v3.10.5%2025-09-06
CVE-2025-10029itsourcecode POS Point Of Sale System complex_header_2.php cross-site scripting6.1v3.10.3%2025-09-06
CVE-2025-10028itsourcecode POS Point Of Sale System 6776.php cross-site scripting6.1v3.10.3%2025-09-06
CVE-2025-10003UsersWP WordPress plugin SQL injection6.5CNA v3.10.3%2025-09-06Fix
CVE-2025-9961TP-Link Systems AX10 V1/V1.2/V2/V2.6/V3/V3.6 authenticated RCE by CWMP binary8.6CNA v4.010.0%2025-09-06Emerging ThreatsExploit codeFix
CVE-2025-9853Optio Dentistry WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-9849Html Social share buttons WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-9515Multi Step Form WordPress plugin authenticated (Admin+) arbitrary file upload7.2CNA v3.10.7%2025-09-06Fix
CVE-2025-9493Admin Menu Editor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-9442StreamWeasels Kick Integration WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-9126Smart Table Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-9085User Registration and Membership WordPress plugin authenticated (Admin+) SQL injection4.9CNA v3.10.3%2025-09-06Fix
CVE-2025-8722Content Views WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-8564SKT Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-8360LA-Studio Element Kit for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-8359AdForest WordPress theme authentication bypass to admin9.8CNA v3.10.5%2025-09-06Exploit codeFix
CVE-2025-8149aThemes Addons for Elementor Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-7368Rehub WordPress theme unauthenticated password Protected post disclosure5.3CNA v3.10.3%2025-09-06Fix
CVE-2025-7366Rehub WordPress theme unauthenticated arbitrary shortcode execution via re_filterpost7.3CNA v3.10.4%2025-09-06Fix
CVE-2025-7045Cloud SAML SSO WordPress plugin missing authorization unauthenticated Identity Provider deletion6.5CNA v3.10.4%2025-09-06Fix
CVE-2025-7040Cloud SAML SSO WordPress plugin missing authorization unauthenticated settings modification8.2CNA v3.10.3%2025-09-06Fix
CVE-2025-6757Recent Posts Widget Extended WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06
CVE-2025-6067Easy Social Feed WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-06Fix
CVE-2025-0034AMD Instinct™ MI300X out-of-bounds write4.7CNA v3.10.1%2025-09-06
CVE-2025-0032AMD EPYC™ 9005 Series Processors incomplete cleanup7.2CNA v3.10.2%2025-09-06
CVE-2025-0011AMD Ryzen™ 8000 Series Desktop Processors improper removal of sensitive information3.3CNA v3.10.2%2025-09-06
CVE-2025-0010AMD Radeon™ RX 5000 Series Graphics Products Linux graphics driver out-of-bounds write6.1CNA v3.10.1%2025-09-06Fix
CVE-2025-0009AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics null pointer dereference5.5CNA v3.10.1%2025-09-06
CVE-2025-58887Course Booking Platform WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58886Instant Locations WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58884vipdrv WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58883Search Cloud One WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58882Simple Text Slider WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58881New Simple Gallery WordPress plugin SQL injection8.5CNA v3.10.3%2025-09-05
CVE-2025-58880Translate This gTranslate Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58878Woocommerce Gifts Product WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.1%2025-09-05
CVE-2025-58876Aparat Video Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58875WP Github Gist WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58874StoryMap WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58873Pushe Web Push Notification WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58872Simple Price Calculator WordPress plugin broken access control6.5CNA v3.10.3%2025-09-05
CVE-2025-58871Master Paper Collapse Toggle WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58870WP-GraphViz WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58869SimaCookie WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.1%2025-09-05
CVE-2025-58868SimaCookie WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58867Easy Download Media Counter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58866Site Info WordPress plugin sensitive data exposure2.7CNA v3.10.2%2025-09-05
CVE-2025-58865Compact Admin WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05
CVE-2025-58864金数据 WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58863Zoomify embed for WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58862WordPress Events Calendar Plugin connectDaily cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58861Quick Event Calendar WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58860Enable Latex WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58859David Merinas Add to Feedly cross-site request forgery7.1CNA v3.10.1%2025-09-05
CVE-2025-58858WPB Image Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58857Table of content WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-09-05
CVE-2025-58856Woocommerce Notify Updated Product WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2025-09-05
CVE-2025-58855AP HoneyPot WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-09-05
CVE-2025-58854Ultimate AJAX Login WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58853Popping Sidebars and Widgets Light WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58852MSTW League Manager WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58851Boxed Content WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58850Showpass WordPress Extension plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58849Hide Real Download Path WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58848WP likes WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58847WN Flipbox Pro WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58846Dejan Markovic WordPress Buffer cross-site request forgery7.1CNA v3.10.1%2025-09-05
CVE-2025-58845Bulk Watermark WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58844Database to Excel WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58843Auto Last Youtube Video WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58842Donation Forms WP by Givecloud WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58841Media Author WordPress plugin broken access control5.5CNA v3.10.3%2025-09-05
CVE-2025-58840Custom Team Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58839eDS Responsive Menu WordPress plugin PHP object injection7.2CNA v3.10.5%2025-09-05
CVE-2025-58838Smooth Accordion WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58837SS Font Awesome Icon WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58836FW Anker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58835Bonus for Woo WordPress plugin Other vulnerability type vulnerability5.3CNA v3.10.3%2025-09-05Fix
CVE-2025-58834short.io WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58833Invelity MyGLS connect WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2025-09-05
CVE-2025-58832Search by Google WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58831Parallax Scrolling Enllax.js WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05
CVE-2025-58830Parallax Scrolling Enllax.js WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58829Ai Auto Tool Content Writing Assistant All in One WordPress plugin server side request forgery4.9CNA v3.10.2%2025-09-05Fix
CVE-2025-58828코드엠샵 소셜톡 WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58827Job Board Manager WordPress plugin content injection3.8CNA v3.10.2%2025-09-05
CVE-2025-58826WP Publication Archive WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58825Comment Form WP Customize Default Comment Form WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58824Shk Corporate WordPress theme broken access control4.3CNA v3.10.2%2025-09-05
CVE-2025-58823Get Cash WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58822WP Mail WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58821WP Notification Bell WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05Fix
CVE-2025-58820Carousel Ultimate WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05Fix
CVE-2025-58819Bulk Featured Image WordPress plugin arbitrary file upload9.1CNA v3.10.3%2025-09-05
CVE-2025-58818Developer Tools Blocker WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-09-05
CVE-2025-58817SoftMe WordPress theme broken access control4.3CNA v3.10.2%2025-09-05
CVE-2025-58816Product Carousel Slider for Elementor WordPress plugin broken access control3.5CNA v3.10.2%2025-09-05
CVE-2025-58815Aitasi Coming Soon WordPress plugin deserialization of untrusted data7.2CNA v3.10.5%2025-09-05
CVE-2025-58814Stagtools WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58813Consultstreet WordPress theme broken access control4.3CNA v3.10.2%2025-09-05
CVE-2025-58812Best Restaurant Menu by PriceListo WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58811Ultimate Client Dash WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05Fix
CVE-2025-58810Simple Link List Widget WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58809To Lead For Salesforce WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58808prettyPhoto WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58807Purge Varnish Cache WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05
CVE-2025-58806WordPress Error Monitoring by Bugsnag plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-09-05Fix
CVE-2025-58805Widgetize Pages Light WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58804WooCommerce Single Page Checkout WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05
CVE-2025-58802TrustMate.io WooCommerce integration WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05Fix
CVE-2025-58801Responder WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-09-05Fix
CVE-2025-58800WP Email Template WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05Fix
CVE-2025-58799Custom WooCommerce Checkout Fields Editor WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05
CVE-2025-58798BCM Duplicate Menu WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05
CVE-2025-58797Ninja Charts WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-09-05Fix
CVE-2025-58796Elementor Element Condition WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58795Payoneer Checkout WordPress plugin content spoofing4.3CNA v3.10.2%2025-09-05Fix
CVE-2025-58794Notification for Telegram WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05Fix
CVE-2025-58793WPB Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58792Authors List WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05
CVE-2025-58791SEO Auto Linker WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-05
CVE-2025-58790Kiwi WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58789WP Full Stripe Free WordPress plugin SQL injection7.6CNA v3.10.4%2025-09-05Exploit codeFix
CVE-2025-58788License Manager for WooCommerce WordPress plugin SQL injection7.6CNA v3.10.4%2025-09-05Exploit codeFix
CVE-2025-58787Themify Popup WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58786Ibtana Ecommerce Product Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-58785Ray Enterprise Translation WordPress plugin broken access control5.4CNA v3.10.3%2025-09-05
CVE-2025-58784ARI Fancy Lightbox WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58783Gutentor WordPress plugin broken access control4.3CNA v3.10.2%2025-09-05Fix
CVE-2025-58780ScienceLogic SL 1 SQL injection7.2CNA v3.10.2%2025-09-05Fix
CVE-2025-58628Miraculous WordPress theme SQL injection9.3CNA v3.10.3%2025-09-05Fix
CVE-2025-58401Pierre-Adrien Vasseur Obsidian GitHub Copilot Plugin cleartext storage of sensitive information5.1CNA v4.00.1%2025-09-05
CVE-2025-58400RATOC RAID Monitoring Manager unquoted search path8.4CNA v4.00.2%2025-09-05
CVE-2025-58373RooCodeInc Roo-Code roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure5.5CNA v3.10.3%2025-09-05Fix
CVE-2025-58372RooCodeInc Roo-Code roo Code: Potential remote code execution via .code-workspace8.1CNA v3.10.5%2025-09-05Fix
CVE-2025-58371RooCodeInc Roo-Code roo Code is vulnerable to command injection via GitHub actions workflow9.9CNA v4.00.8%2025-09-05Exploit codeFix
CVE-2025-58370RooCodeInc Roo-Code Roo Code: Potential remote code execution8.1CNA v3.10.4%2025-09-05Fix
CVE-2025-58369FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side5.3CNA v3.10.4%2025-09-05Fix
CVE-2025-58367DeepDiff is vulnerable to DoS and remote code execution via Delta class pollution10.0CNA v4.01.1%2025-09-05Fix
CVE-2025-58366Onyxia private helm repository credentials are leaked through unauthenticated API9.4CNA v4.00.4%2025-09-05Fix
CVE-2025-58362Hono contains a flaw in URL path parsing, potentially leading to path confusion7.5CNA v3.10.5%2025-09-05Fix
CVE-2025-58359ZcashFoundation frost frost-core: Refresh shares with smaller min_signers will reduce group security6.0CNA v4.00.3%2025-09-05Fix
CVE-2025-58352Weblate has long session expiry times during second factor verification2.1CNA v4.00.3%2025-09-05Fix
CVE-2025-58313Huawei HarmonyOS race condition vulnerability in the device standby module5.1CNA v3.10.1%2025-09-05Fix
CVE-2025-58296Huawei HarmonyOS race condition vulnerability in the audio module7.5CNA v3.10.1%2025-09-05Fix
CVE-2025-58281Huawei HarmonyOS out-of-bounds read vulnerability in the runtime interpreter module8.4CNA v3.10.1%2025-09-05Fix
CVE-2025-58280Huawei HarmonyOS prototype pollution8.4CNA v3.10.1%2025-09-05Fix
CVE-2025-58276Huawei HarmonyOS permission verification vulnerability in the home screen module6.8CNA v3.10.1%2025-09-05Fix
CVE-2025-58214Indutri WordPress theme local file inclusion8.1CNA v3.10.5%2025-09-05Fix