CVE-2025 list

CVE-2025 records published in September 2025

Page four of four: records 3,001 to 3,729 of the 3,729 published in September 2025, newest first. The first page carries the figures for September 2025.

CVE-2025 records published in September 2025, newest first: records 3,001 to 3,729 of 3,729
CVE Summary CVSS EPSS Published Signals
CVE-2025-58206MaxCoach WordPress theme local file inclusion9.8v3.10.4%2025-09-05Fix
CVE-2025-58179Astro Cloudflare adapter is vulnerable to server-side request forgery via /_image endpoint7.2CNA v3.10.9%2025-09-05NucleiFix
CVE-2025-57889InPost Gallery WordPress plugin local file inclusion7.5CNA v3.10.4%2025-09-05Fix
CVE-2025-57807ImageMagick BlobStream Forward-Seek Under-Allocation3.8CNA v3.10.3%2025-09-05Fix
CVE-2025-55739FreePBX api module OAuth signing key hard-coded credentials5.1CNA v4.00.4%2025-09-05Fix
CVE-2025-55671TkEasyGUI affected by uncontrolled search path element issue8.5CNA v4.00.2%2025-09-05Fix
CVE-2025-55037TkEasyGUI vulnerable to OS command injection9.3CNA v4.02.7%2025-09-05Fix
CVE-2025-54744MasterStudy LMS WordPress plugin broken access control6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-53791Microsoft Edge (Chromium-based) security feature bypass4.7CNA v3.10.4%2025-09-05Fix
CVE-2025-53571HAPPY WordPress plugin broken access control6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-53307Assistant WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-09-05Fix
CVE-2025-49401smart SEO WordPress plugin privilege escalation9.8CNA v3.10.4%2025-09-05Fix
CVE-2025-48395Eaton NMC G2 path traversal4.7CNA v3.10.3%2025-09-05Fix
CVE-2025-48317WooCommerce Payment Gateway for Saferpay WordPress plugin path traversal7.5CNA v3.10.4%2025-09-05
CVE-2025-48105Easy Flash Embed WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-48104Floating Window Music Player WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-09-05
CVE-2025-48103Today's Date Inserter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-05
CVE-2025-48102GoUrl Bitcoin Payment Gateway and Paid Downloads and Membership stored cross-site scripting5.9CNA v3.10.2%2025-09-05
CVE-2025-41408LY "Yahoo! Shopping" App handler for custom URL scheme issue improper authorization5.3CNA v4.00.3%2025-09-05
CVE-2025-39726Linux kernel s390 ISM device driver race condition9.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39725Linux kernel memory reclaim hwpoison handling null pointer dereference5.5v3.10.1%2025-09-05Fix
CVE-2025-39724Linux kernel 8250 serial driver denial of service5.5NVD v3.10.2%2025-09-05Fix
CVE-2025-39723Linux kernel netfs unbuffered write path out-of-bounds write7.1CNA v3.10.2%2025-09-05Fix
CVE-2025-39722Linux kernel CAAM crypto driver denial of service5.5v3.10.1%2025-09-05Fix
CVE-2025-39721Linux kernel crypto crash5.5NVD v3.10.1%2025-09-05Fix
CVE-2025-39720Linux kernel ksmbd connection handling memory leak7.5CNA v3.10.3%2025-09-05Fix
CVE-2025-39719Linux kernel BNO055 IMU driver out-of-bounds read7.1v3.10.1%2025-09-05Fix
CVE-2025-39718Linux kernel vsock virtio driver out-of-bounds write8.4CNA v3.10.2%2025-09-05Fix
CVE-2025-39717Linux kernel open_tree_attr id-mapping handling use-after-free7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39716Linux kernel parisc __get_user function vulnerability5.5v3.10.1%2025-09-05Fix
CVE-2025-39715Linux kernel parisc LWS gateway page vulnerability5.5v3.10.1%2025-09-05Fix
CVE-2025-39714Linux kernel usbtv video capture driver vulnerability7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39713Linux kernel rainshadow-cec time-of-check time-of-use race condition4.7v3.10.1%2025-09-05Fix
CVE-2025-39712Linux kernel mt9m114 deadlock5.5v3.10.1%2025-09-05Fix
CVE-2025-39711Linux kernel ivsc crash7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39710Linux kernel Venus video driver shared memory parsing out-of-bounds read7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39709Linux kernel Venus video driver probe null pointer dereference5.5CNA v3.10.2%2025-09-05Fix
CVE-2025-39708Linux kernel Iris video driver null pointer dereference5.5v3.10.1%2025-09-05Fix
CVE-2025-39707Linux kernel AMDGPU display debugfs null pointer dereference5.5v3.10.1%2025-09-05Fix
CVE-2025-39706Linux kernel AMDKFD debugfs null pointer dereference5.5v3.10.1%2025-09-05Fix
CVE-2025-39705Linux kernel AMD display driver null pointer dereference5.5NVD v3.10.1%2025-09-05Fix
CVE-2025-39704Linux kernel LoongArch KVM interrupt controller emulation buffer overflow8.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39703Linux kernel HSR protocol driver vulnerability9.8CNA v3.10.4%2025-09-05Fix
CVE-2025-39702Linux kernel sr observable discrepancy9.8CNA v3.10.4%2025-09-05Fix
CVE-2025-39701In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The security-version-number check should be used rather than the runtime version check for driver updates. Otherwise, the firmware update would fail when the update binary had7.8v3.10.2%2025-09-05Fix
CVE-2025-39700Linux kernel DAMON memory migration improper input validation5.5v3.10.2%2025-09-05Fix
CVE-2025-39699Linux kernel RISC-V IOMMU driver null pointer dereference5.5v3.10.1%2025-09-05Fix
CVE-2025-39698Linux kernel io_uring futex handling use-after-free7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39697Linux kernel NFS client race condition7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39696Linux kernel tas2781 memory corruption7.8CNA v3.10.1%2025-09-05Fix
CVE-2025-39695Linux kernel RDMA rxe driver vulnerability5.5v3.10.2%2025-09-05Fix
CVE-2025-39694Linux kernel SCLP interrupt handler null pointer dereference7.3CNA v3.10.2%2025-09-05Fix
CVE-2025-39693Linux kernel AMD display atomic connector state null pointer dereference5.5v3.10.2%2025-09-05Fix
CVE-2025-39692Linux kernel ksmbd SMB direct RDMA null pointer dereference5.5v3.10.2%2025-09-05Fix
CVE-2025-39691Linux kernel buffer head read helper use-after-free7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39690Linux kernel sca3300 accelerometer driver information disclosure5.5v3.10.1%2025-09-05Fix
CVE-2025-39689Linux kernel ftrace filter file reader use-after-free7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39687Linux kernel as73211 light sensor driver vulnerability7.1v3.10.2%2025-09-05Fix
CVE-2025-39686Linux kernel comedi INSN_BITS emulation vulnerability7.8v3.10.2%2025-09-05Fix
CVE-2025-39685Linux kernel comedi pcl726 driver out-of-bounds read7.1v3.10.2%2025-09-05Fix
CVE-2025-39684Linux kernel comedi ioctl handler information disclosure5.5v3.10.2%2025-09-05Fix
CVE-2025-39683Linux kernel ftrace filter parser out-of-bounds read7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39682Linux Kernel improper check for unusual or exceptional conditions9.8CNA v3.12.9%2025-09-05KEVExploit codeFix
CVE-2025-39681Linux kernel Hygon CPU resctrl initialization division by zero5.5NVD v3.10.2%2025-09-05Fix
CVE-2025-39680Linux kernel rtl9300 I2C SMBus driver out-of-bounds read7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39679Linux kernel Nouveau NVIF VMM constructor memory leak5.5v3.10.2%2025-09-05Fix
CVE-2025-39678Linux kernel AMD HSMP driver null pointer dereference5.5v3.10.2%2025-09-05Fix
CVE-2025-39677Linux kernel qdisc backlog accounting vulnerability7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-39676Linux kernel qla4xxx null pointer dereference5.5v3.10.2%2025-09-05Fix
CVE-2025-39675Linux kernel AMD display HDCP session creation null pointer dereference5.5v3.10.2%2025-09-05Fix
CVE-2025-39674Linux kernel ufs-qcom null pointer dereference5.5v3.10.1%2025-09-05Fix
CVE-2025-39673Linux kernel PPP channel forwarding path race condition9.8CNA v3.10.3%2025-09-05Fix
CVE-2025-38737Linux kernel CIFS transform request buffer vulnerability9.8CNA v3.10.4%2025-09-05Fix
CVE-2025-38736Linux kernel asix_devices out-of-bounds read7.1NVD v3.10.2%2025-09-05Fix
CVE-2025-38735Linux kernel gve Ethernet driver null pointer dereference7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-38734Linux kernel SMC protocol listen handling use-after-free9.8CNA v3.10.5%2025-09-05Fix
CVE-2025-38733Linux kernel s390 lowcore memory mapping null pointer dereference7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-38732Linux kernel netfilter reject module vulnerability5.5NVD v3.10.2%2025-09-05Fix
CVE-2025-38731Linux kernel Xe GPU driver vm_bind ioctl double free7.8CNA v3.10.2%2025-09-05Fix
CVE-2025-35452PTZOptics PT12X-SE-xx-G3 Pan-Tilt-Zoom cameras default administrative credentials for web interface9.2CNA v4.00.9%2025-09-05Fix
CVE-2025-35451PTZOptics PT12X-SE-xx-G3 hard-coded credentials9.3CNA v4.00.8%2025-09-05Fix
CVE-2025-32320Google Android System UI privilege escalation7.8CISA ADP v3.10.1%2025-09-05Fix
CVE-2025-32318Google Android Skia out-of-bounds write8.8CISA ADP v3.10.3%2025-09-05Fix
CVE-2025-32317Google Android App widget information disclosure5.5CISA ADP v3.10.1%2025-09-05Fix
CVE-2025-32316Google Android gralloc4 out-of-bounds write5.5CISA ADP v3.10.1%2025-09-05Fix
CVE-2025-30200ECOVACS Vacuum and Base Station Hard-Coded AES Encryption2.3CNA v4.00.1%2025-09-05Fix
CVE-2025-30199ECOVACS Vacuum and Base Station accept unsigned firmware7.5CNA v4.00.3%2025-09-05Fix
CVE-2025-30198ECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK2.3CNA v4.00.2%2025-09-05Fix
CVE-2025-27003Quick Paypal Payments WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-05Fix
CVE-2025-26461Google Android Permission Manager privilege escalation3.3CISA ADP v3.10.1%2025-09-05Fix
CVE-2025-26434Google Android libxml2 out-of-bounds read5.5CISA ADP v3.10.1%2025-09-05Fix
CVE-2025-10061Malformed $group Query may cause MongoDB Server to crash6.5CNA v3.10.3%2025-09-05Fix
CVE-2025-10060MongoDB may be susceptible to Invariant failure in Transactions due Upsert Operation6.5CNA v3.10.4%2025-09-05Fix
CVE-2025-10059MongoDB Server router will crash when incorrect lsid is set on a sharded query6.5CNA v3.10.3%2025-09-05Fix
CVE-2025-10044Keycloak: Keycloak error_description injection on error pages4.3CNA v3.10.3%2025-09-05Fix
CVE-2025-10027itsourcecode POS Point Of Sale System 2512.php cross-site scripting6.1v3.10.3%2025-09-05
CVE-2025-10026itsourcecode POS Point Of Sale System -complex_header.php cross-site scripting6.1v3.10.3%2025-09-05
CVE-2025-10025PHPGurukul Online Course Registration semester.php SQL injection9.8v3.10.4%2025-09-05
CVE-2025-10014elunez Eladmin Email Address updateEmail updateUserEmail improper authorization2.3CNA v4.00.3%2025-09-05
CVE-2025-10013Portabilis i-Educar exportacao-para-o-seb access control5.3CNA v4.00.4%2025-09-05
CVE-2025-10012Portabilis i-Educar educar_historico_escolar_lst.php SQL injection8.8v3.10.4%2025-09-05
CVE-2025-10011Portabilis i-Educar edit SQL injection8.8v3.10.5%2025-09-05
CVE-2025-9999arcinfo PcVue improper validation of payload elements7.6CNA v4.00.2%2025-09-05Fix
CVE-2025-9998arcinfo PcVue improper validation of packets sequencing6.0CNA v4.00.3%2025-09-05Fix
CVE-2025-9990WordPress Helpdesk Integration plugin unauthenticated local file inclusion8.1CNA v3.10.7%2025-09-05
CVE-2025-9709nRF52810 Runtime EM Fault injection APPROTECT Bypass8.6CNA v4.00.2%2025-09-05
CVE-2025-9566Red Hat Enterprise Linux 10 podman: Podman kube play command may overwrite host files8.1CNA v3.11.1%2025-09-05Fix
CVE-2025-9057Biagiotti Core WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-05Fix
CVE-2025-8944OceanWP WordPress theme Subscriber+ limited option update4.3CISA ADP v3.10.2%2025-09-05Fix
CVE-2025-8695Reflected XSS in Netcad Software's NetGIS Server5.4CNA v3.10.2%2025-09-05
CVE-2025-8684Flatsome WordPress theme authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.2%2025-09-05Fix
CVE-2025-7445Kubernetes secrets-store-sync-controller discloses service account tokens in logs6.5CNA v3.10.2%2025-09-05Fix
CVE-2025-58361Promptcraft Forge Studio URL scheme check cross-site scripting9.3CNA v3.10.3%2025-09-04
CVE-2025-58358zcaceres markdownify-mcp markdownify is vulnerable to command injection7.5CNA v3.11.0%2025-09-04Fix
CVE-2025-583575IRE Chat Message XSS vulnerability enables remote code execution9.7CNA v3.10.6%2025-09-04Fix
CVE-2025-58355charmbracelet soft-serve soft Serve is vulnerable to arbitrary file writing through its SSH API7.7CNA v3.10.3%2025-09-04Fix
CVE-2025-58353Promptcraft Forge Studio input sanitizer cross-site scripting8.2CNA v3.10.2%2025-09-04
CVE-2025-58064CKEditor is susceptible to cross-site scripting (XSS) through its clipboard package2.3CNA v4.00.4%2025-09-04Fix
CVE-2025-58057Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack6.9CNA v4.00.6%2025-09-04Fix
CVE-2025-57576PHPGurukul Online Shopping Portal cross-site scripting5.4CISA ADP v3.10.2%2025-09-04Exploit code
CVE-2025-57263Phpversion Vx Guestbook authenticated SQL injection7.2CISA ADP v3.10.4%2025-09-04
CVE-2025-55305Electron is vulnerable to code injection via resource modification6.1CNA v3.10.3%2025-09-04Fix
CVE-2025-55244Microsoft Azure Bot Service elevation of privilege9.0CNA v3.10.6%2025-09-04Fix
CVE-2025-55242Microsoft Xbox Certification Bug Copilot Djando information disclosure6.5CNA v3.10.8%2025-09-04Fix
CVE-2025-55241Azure Entra ID elevation of privilege10.0CNA v3.11.6%2025-09-04Fix
CVE-2025-55238Microsoft Dynamics 365 FastTrack Implementation Assets information disclosure7.5CNA v3.10.8%2025-09-04Fix
CVE-2025-55209FreePBX UCP is vulnerable to stored XSS through its User Control Panel5.1CNA v4.00.4%2025-09-04Fix
CVE-2025-55190argoproj argo-cd Argo CD: Project API Token exposes Repository Credentials10.0CNA v3.15.5%2025-09-04Reported exploitedNucleiFix
CVE-2025-54914Microsoft Azure Networking elevation of privilege10.0CNA v3.12.5%2025-09-04Exploit codeFix
CVE-2025-48581Google Android apexd.cpp privilege escalation8.4CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-48563Google Android RemoteFillService.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48562Google Android RemotePrintDocument.java information disclosure5.0v3.10.1%2025-09-04Fix
CVE-2025-48561Google Android multiple locations information disclosure5.5NVD v3.10.1%2025-09-04Fix
CVE-2025-48560Google Android AndroidManifest.xml information disclosure5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48559Google Android AppOpsService.java denial of service5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48558Google Android BatteryService.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48556Google Android NotificationChannel.java privilege escalation7.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48554Google Android DevicePolicyManagerService.java denial of service6.1CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48553Google Android DevicePolicyManagerService.java denial of service7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48552Google Android DevicePolicyManagerService.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48551Google Android multiple locations information disclosure5.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48550Google Android SliceManagerTest.java denial of service5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48549Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48548Google Android AppOpsControllerImpl.java privilege escalation7.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48547Google Android multiple locations insecure permissions7.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48546Google Android SafeActivityOptions.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48545Google Android confused deputy7.1CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48544Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48543Android Runtime use-after-free8.8CISA ADP v3.10.5%2025-09-04KEVExploit codeFix
CVE-2025-48542Google Android AccountManagerService.java denial of service5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48541Google Android FaceSettings.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48540Google Android RpcState.cpp privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48539Google Android acl_arbiter.cc out-of-bounds read8.0CISA ADP v3.10.3%2025-09-04Fix
CVE-2025-48538Google Android PackageManagerService.java denial of service5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48537Google Android multiple locations denial of service7.1CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48535Google Android AppRestrictionsFragment.java privilege escalation7.8CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-48534Google Android CellBroadcastHandler.java privilege escalation8.8CISA ADP v3.10.3%2025-09-04Fix
CVE-2025-48533Google Android multiple locations privilege escalation7.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48532Google Android MediaProvider.java privilege escalation7.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48531Google Android CredentialStorage insecure permissions7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48530Google Android multiple locations remote code execution8.1CISA ADP v3.10.5%2025-09-04Fix
CVE-2025-48529Google Android VoicemailNotificationSettingsUtil.java information disclosure5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48528Google Android multiple locations privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48527Google Android multiple locations information disclosure6.2CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48526Google Android ChooserActivity.java privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48524Google Android WifiPermissionsUtil.java insecure permissions5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48523Google Android SelectAccountActivity.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-48522Google Android AssociationRequest.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-43772Liferay Portal vulnerable to denial of service in Kaleo Forms Admin7.1CNA v4.00.5%2025-09-04Fix
CVE-2025-41063Reflected cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41062Reflected cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41061Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41060Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41059Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41058Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41057Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41056Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41055Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41054Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41053Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41052Stored cross-site scripting vulnerability in appRain CMF5.4NVD v3.10.2%2025-09-04
CVE-2025-41051Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41050Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41049Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41048Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41047Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41046Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41045Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41044Stored cross-site scripting vulnerability in appRain CMF5.4NVD v3.10.2%2025-09-04
CVE-2025-41043Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41042Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41041Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41040Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41039Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41038Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41037Stored cross-site scripting vulnerability in appRain CMF5.4v3.10.2%2025-09-04
CVE-2025-41036Stored cross-site scripting vulnerability in appRain CMF5.4NVD v3.10.2%2025-09-04
CVE-2025-41035Path traversal vulnerability in appRain CMF6.5NVD v3.10.7%2025-09-04
CVE-2025-41034SQL injection vulnerability in appRain CMF9.8v3.10.4%2025-09-04
CVE-2025-41033SQL injection vulnerability in appRain CMF9.8v3.10.4%2025-09-04
CVE-2025-41032SQL injection vulnerability in appRain CMF9.8v3.10.4%2025-09-04
CVE-2025-38730Linux kernel io_uring buffer handling out-of-bounds write7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38729Linux kernel USB audio UAC3 power domain descriptors out-of-bounds write7.8v3.10.2%2025-09-04Fix
CVE-2025-38728Linux kernel SMB3 server interface parsing out-of-bounds read9.1CNA v3.10.3%2025-09-04Fix
CVE-2025-38727Linux kernel netlink socket unicast infinite loop5.5NVD v3.10.2%2025-09-04Fix
CVE-2025-38726Linux kernel ftgmac100 Ethernet driver null pointer dereference5.5v3.10.1%2025-09-04Fix
CVE-2025-38725Linux kernel AX88772 USB Ethernet driver null pointer dereference5.5NVD v3.10.2%2025-09-04Fix
CVE-2025-38724Linux kernel nfsd use-after-free9.8CNA v3.10.4%2025-09-04Fix
CVE-2025-38723Linux kernel LoongArch BPF JIT vulnerability5.5v3.10.2%2025-09-04Fix
CVE-2025-38722Linux kernel habanalabs dma-buf export use-after-free7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38721Linux kernel netfilter ctnetlink reference count leak5.5NVD v3.10.2%2025-09-04Fix
CVE-2025-38720Linux kernel hibmcge deadlock5.5v3.10.1%2025-09-04Fix
CVE-2025-38719Linux kernel hibmcge network driver divide by zero5.5v3.10.1%2025-09-04Fix
CVE-2025-38718Linux kernel sctp uninitialized resource use7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38717Linux kernel KCM socket unattach race condition7.8CNA v3.10.1%2025-09-04Fix
CVE-2025-38716Linux kernel hfs crash5.5v3.10.1%2025-09-04Fix
CVE-2025-38715Linux kernel hfs crash7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38714Linux kernel hfsplus out-of-bounds read7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38713Linux kernel hfsplus out-of-bounds read7.1CNA v3.10.2%2025-09-04Fix
CVE-2025-38712Linux kernel hfsplus reachable assertion5.5v3.10.2%2025-09-04Fix
CVE-2025-38711Linux kernel SMB server file linking deadlock5.5v3.10.1%2025-09-04Fix
CVE-2025-38710Linux kernel GFS2 exhash directory handling vulnerability7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38709Linux kernel loop block device driver vulnerability5.5v3.10.1%2025-09-04Fix
CVE-2025-38708Linux kernel DRBD write conflict handling use-after-free9.8CNA v3.10.4%2025-09-04Fix
CVE-2025-38707Linux kernel NTFS3 file name validation vulnerability7.1CNA v3.10.2%2025-09-04Fix
CVE-2025-38706Linux kernel ASoC PCM runtime removal null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38705Linux kernel AMD GPU power management driver null pointer dereference5.5NVD v3.10.2%2025-09-04Fix
CVE-2025-38704Linux kernel RCU no-callback offloading vulnerability7.8NVD v3.10.2%2025-09-04Fix
CVE-2025-38703Linux kernel Xe DRM dma-fence handling use-after-free7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38702Linux kernel fbdev framebuffer registration out-of-bounds write7.8NVD v3.10.2%2025-09-04Fix
CVE-2025-38701Linux kernel ext4 inline data handling reachable assertion5.5NVD v3.10.2%2025-09-04Fix
CVE-2025-38700Linux kernel libiscsi iSER connection teardown null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38699Linux kernel bfa double free7.8v3.10.2%2025-09-04Fix
CVE-2025-38698Linux kernel JFS file size validation vulnerability5.5v3.10.2%2025-09-04Fix
CVE-2025-38697Linux kernel JFS block allocation improper array index validation7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38696Linux kernel MIPS vDSO stack handling null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38695Linux kernel lpfc null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38694Linux kernel dib7090p DVB tuner driver null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38693Linux kernel w7090p DVB tuner driver null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38692Linux kernel exFAT directory handling infinite loop5.5v3.10.2%2025-09-04Fix
CVE-2025-38691Linux kernel pNFS block and SCSI layout driver vulnerability5.5NVD v3.10.2%2025-09-04Fix
CVE-2025-38690Linux kernel drm/xe/migrate reachable assertion5.5v3.10.1%2025-09-04Fix
CVE-2025-38689Linux kernel x86 FPU AVX-512 status reporting null pointer dereference5.5v3.10.1%2025-09-04Fix
CVE-2025-38688Linux kernel IOMMUFD IOVA allocation vulnerability8.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38687Linux kernel comedi driver race condition7.3CNA v3.10.1%2025-09-04Fix
CVE-2025-38686Linux kernel userfaultfd UFFDIO_MOVE denial of service5.5v3.10.2%2025-09-04Fix
CVE-2025-38685Linux kernel fbdev console framebuffer out-of-bounds write7.8CNA v3.10.2%2025-09-04Fix
CVE-2025-38684Linux kernel ETS packet scheduler null pointer dereference5.5v3.10.2%2025-09-04Fix
CVE-2025-38683Linux kernel hv_netvsc kernel panic5.5v3.10.2%2025-09-04Fix
CVE-2025-38682Linux kernel I2C core double free7.8v3.10.2%2025-09-04Fix
CVE-2025-38681Linux kernel page table dump race condition4.7NVD v3.10.1%2025-09-04Fix
CVE-2025-38680Linux kernel UVC video driver out-of-bounds read7.1v3.10.2%2025-09-04Fix
CVE-2025-38679Linux kernel venus out-of-bounds read7.3CNA v3.10.2%2025-09-04Fix
CVE-2025-36909Google Android information disclosure5.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36908Google Android lwis_device_top.c out-of-bounds write6.7CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36907Google Android draw.c out-of-bounds write7.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36906Google Android darwinn_mlir_converter_aidl.cc out-of-bounds write7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36905Google Android gxp_mapping.c privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36904Google Android improper privilege management9.8CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36903Google Android lwis_io_buffer_write out-of-bounds read7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36902Google Android syna_tcm2_sysfs.c out-of-bounds write6.7CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36901Google Android improper privilege management8.8CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36900Google Android lwis_device_test.c out-of-bounds write6.7CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36899Google Android active debug code8.4CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36898Google Android code privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36897Google Android cd_CnMsgCodecUserApi.cpp out-of-bounds write9.8CISA ADP v3.10.3%2025-09-04Fix
CVE-2025-36896Google Android improper privilege management9.8CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36895Google Android information disclosure7.5CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36894Google Android TBD denial of service7.5CISA ADP v3.10.3%2025-09-04Fix
CVE-2025-36893Google Android gxp_main_actor.cc information disclosure5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-36892Google Android denial of service7.5CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36891Google Android improper privilege management8.8CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36890Google Android improper privilege management9.8CISA ADP v3.10.2%2025-09-04Fix
CVE-2025-36887Google Android wl_cfgscan.c out-of-bounds write7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32350Google Android ControlsSettingsDialogManager.kt privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32349Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32347Google Android BiometricEnrollIntroduction.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32346Google Android VoicemailSettingsActivity.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32345Google Android privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32333Google Android SpaActivity.kt insecure permissions7.8v3.10.1%2025-09-04Fix
CVE-2025-32332Google Android multiple locations memory corruption7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32331Google Android KeyguardService.java privilege escalation7.8NVD v3.10.1%2025-09-04Fix
CVE-2025-32330Google Android LocalBluetoothLeBroadcast.java information disclosure5.7CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32327Google Android PickerDbFacade.java unauthorized data access7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32326Google Android AppRestrictionsFragment.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32325Google Android Parcel.cpp out-of-bounds write7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32324Google Android ActivityManagerShellCommand.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Exploit codeFix
CVE-2025-32323Google Android Shared.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32322Google Android MediaProjectionPermissionActivity.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32321Google Android AccountTypePreferenceLoader.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-32312Google Android PackageParser.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26464Google Android AppSearchManagerService.java privilege escalation7.8v3.10.1%2025-09-04Fix
CVE-2025-26463Google Android resource exhaustion5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26462Google Android AccessibilityServiceConnection.java privilege escalation7.8v3.10.1%2025-09-04Fix
CVE-2025-26458Google Android LocationProviderManager.java privilege escalation7.8v3.10.1%2025-09-04Fix
CVE-2025-26456Google Android DexUseManagerLocal.java crash5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26455Google Android NdkMediaCodec.cpp out-of-bounds write7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26454Google Android DisclaimersParserImpl.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26453Google Android BluetoothOppSendFileInfo.java information disclosure5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26452Google Android ResourcesImpl.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26450Google Android IInputMethodSessionWrapper.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26449Google Android multiple locations denial of service5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26448Google Android CursorWindow.cpp out-of-bounds read5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26445Google Android ConnectivityService.java information disclosure5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26444Google Android logic flaw7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26443Google Android HtmlToSpannedParser.java privilege escalation7.3CISA ADP v3.10.1%2025-09-04Exploit codeFix
CVE-2025-26442Google Android information disclosure5.5v3.10.1%2025-09-04Fix
CVE-2025-26441Google Android sdp_discovery.cc out-of-bounds read6.5CISA ADP v3.10.3%2025-09-04Fix
CVE-2025-26440Google Android CameraService.cpp privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26439Google Android AccessibilitySettingsUtils.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26438Google Android smp_act.cc privilege escalation8.8CISA ADP v3.10.3%2025-09-04Fix
CVE-2025-26437Google Android CredentialManagerService.java information disclosure5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26436Google Android PendingIntentRecord.java privilege escalation7.8v3.10.1%2025-09-04Fix
CVE-2025-26435Google Android privilege escalation7.8v3.10.1%2025-09-04Fix
CVE-2025-26432Google Android multiple locations denial of service5.5v3.10.1%2025-09-04Fix
CVE-2025-26431Google Android AccessibilityFragment.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26430Google Android SpaAppBridgeActivity privilege escalation7.8v3.10.1%2025-09-04Fix
CVE-2025-26429Google Android AppOpsService.java denial of service5.5CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26428Google Android LockTaskController.java privilege escalation3.2CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26427Google Android multiple locations privilege escalation4.4CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26426Google Android BroadcastController.java privilege escalation5.1CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26425Google Android RoleService.java privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26424Google Android VpnManager.java information disclosure4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26423Google Android WifiConfigurationUtil.java denial of service6.2CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26422Google Android WindowManagerService.java privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26421Google Android multiple locations privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26420Google Android GrantPermissionsActivity.java privilege escalation4.4CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-26419Google Android SystemSettingsFragment.java privilege escalation3.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-25048IBM Jazz Foundation path traversal6.5CNA v3.10.3%2025-09-04Fix
CVE-2025-23302NVIDIA HGX, DGX Hopper denial of service4.2CNA v3.10.1%2025-09-04Fix
CVE-2025-23301NVIDIA HGX, DGX Hopper denial of service4.2CNA v3.10.1%2025-09-04Fix
CVE-2025-23262NVIDIA ConnectX GA incorrect authorization6.3CNA v3.10.2%2025-09-04Fix
CVE-2025-23261NVIDIA NVOS sensitive information in log files5.5CNA v3.10.2%2025-09-04Fix
CVE-2025-23259NVIDIA Mellanox DPDK race condition6.5CNA v3.10.3%2025-09-04Fix
CVE-2025-23258NVIDIA DOCA with collectx-dpeserver incorrect permission assignment7.3CNA v3.10.2%2025-09-04Fix
CVE-2025-23257NVIDIA DOCA with collectx-clxapidev incorrect permission assignment7.3CNA v3.10.2%2025-09-04Fix
CVE-2025-23256NVIDIA BlueField GA incorrect authorization8.7CNA v3.10.1%2025-09-04Fix
CVE-2025-22441Google Android RemoteViews.java privilege escalation7.3CISA ADP v3.10.1%2025-09-04Exploit codeFix
CVE-2025-22425Google Android InstallStart.java insecure permissions5.1CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-22415Google Android Android.bp privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-22414Google Android FrpBypassAlertActivity.java privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-9942CodeAstro Real Estate Management System submitproperty.php unrestricted upload8.8v3.10.5%2025-09-04
CVE-2025-9941CodeAstro Real Estate Management System register.php unrestricted upload8.8v3.10.5%2025-09-04
CVE-2025-9940CodeAstro Real Estate Management System feature.php cross-site scripting5.4v3.10.3%2025-09-04
CVE-2025-9939CodeAstro Real Estate Management System propertyview.php cross-site scripting5.4v3.10.2%2025-09-04
CVE-2025-9938D-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflow8.7CNA v4.01.5%2025-09-04Emerging Threats
CVE-2025-9937elunez eladmin LocalStorageController deleteFile improper authorization5.3CNA v4.00.4%2025-09-04
CVE-2025-9936fuyang_lipengjun platform queryAll AdController improper authorization5.3CNA v4.00.4%2025-09-04
CVE-2025-9935TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection9.8v3.13.0%2025-09-04Emerging Threats
CVE-2025-9934TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection9.8v3.13.7%2025-09-04
CVE-2025-9933PHPGurukul Beauty Parlour Management System view-appointment.php SQL injection9.8v3.10.4%2025-09-04Exploit code
CVE-2025-9932PHPGurukul Beauty Parlour Management System update-image.php SQL injection9.8v3.10.4%2025-09-04
CVE-2025-9931Jinher OA POST request login!changePassWord.action cross-site scripting6.1v3.10.4%2025-09-04
CVE-2025-99301000projects Beauty Parlour Management System contact-us.php SQL injection9.8v3.10.4%2025-09-04
CVE-2025-9929code-projects Responsive Blog Site blogs_view.php cross-site scripting4.8v3.10.3%2025-09-04
CVE-2025-9636Cross-Origin Opener Policy vulnerability in pgAdmin 47.9CNA v3.10.2%2025-09-04Fix
CVE-2025-9616PopAd WordPress plugin cross-site request forgery to settings update5.3CNA v3.10.2%2025-09-04
CVE-2025-9519Easy Timer WordPress plugin authenticated (Editor+) remote code execution via shortcode7.2CNA v3.10.9%2025-09-04Exploit codeFix
CVE-2025-9518atec Debug WordPress plugin authenticated (Administrator+) arbitrary file deletion7.2CNA v3.10.9%2025-09-04Fix
CVE-2025-9517atec Debug WordPress plugin authenticated (Administrator+) remote code execution7.2CNA v3.10.6%2025-09-04Fix
CVE-2025-9516atec Debug WordPress plugin authenticated (Administrator+) arbitrary file read4.9CNA v3.10.4%2025-09-04Fix
CVE-2025-9467Vaadin possibility to bypass file upload validation on the server-side5.3CNA v4.00.4%2025-09-04Fix
CVE-2025-8311dotCMS Cloud Services (dCS) SQL injection9.4CNA v4.01.7%2025-09-04Exploit codeFix
CVE-2025-7388Progress Software OpenEdge authenticated command injection8.4CNA v3.10.9%2025-09-04Fix
CVE-2025-7385SQL injection in GOV CMS9.3CNA v4.00.4%2025-09-04Fix
CVE-2025-6984Sensitive information disclosure due to Insecure XML Parsing in langchain-ai/langchain7.5CNA v3.01.6%2025-09-04Fix
CVE-2025-6785Tesla Model 3 Physical CAN Bus injection4.7CNA v4.00.2%2025-09-04Fix
CVE-2025-6085Celonis Make Connector upload_media function unrestricted file upload7.2CNA v3.11.2%2025-09-04Exploit codeFix
CVE-2025-2694IBM Sterling B2B Integrator cross-site scripting4.8CNA v3.10.2%2025-09-04Fix
CVE-2025-2667IBM Sterling B2B Integrator information disclosure2.7CNA v3.10.3%2025-09-04Fix
CVE-2025-2417Akinsoft e-Mutabakat missing brute-force protection8.6CNA v3.10.4%2025-09-04Fix
CVE-2025-2411Akinsoft TaskPano missing brute-force protection8.6CNA v3.10.4%2025-09-04Fix
CVE-2025-0089Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-0087Google Android UninstallerActivity.java privilege escalation5.1CISA ADP v3.10.2%2025-09-04Exploit codeFix
CVE-2025-0077Google Android UserController.java privilege escalation4.0CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-0076Google Android multiple locations information disclosure3.3CISA ADP v3.10.1%2025-09-04Fix
CVE-2025-58644LTL Freight Quotes - TQL Edition WordPress plugin PHP object injection7.2CNA v3.10.4%2025-09-03Fix
CVE-2025-58643LTL Freight Quotes Daylight Edition WordPress plugin PHP object injection7.2CNA v3.10.4%2025-09-03Fix
CVE-2025-58642LTL Freight Quotes Day and Ross Edition WordPress plugin PHP object injection7.2CNA v3.10.4%2025-09-03Fix
CVE-2025-58641Exit Intent Popup WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.2%2025-09-03Fix
CVE-2025-58640Document Engine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58639Contact Form By Mega Forms WordPress plugin broken access control5.4CNA v3.10.2%2025-09-03Fix
CVE-2025-58637immonex Kickstart WordPress plugin local file inclusion7.5CNA v3.10.4%2025-09-03Fix
CVE-2025-58635Support Genix WordPress plugin broken access control5.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58634PeachPay Payments WordPress plugin broken access control5.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58633Booking Ultra Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58632Dadevarzan WordPress Common plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58631IssueM WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-03Fix
CVE-2025-58630Simple Matomo Tracking Code WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-03Fix
CVE-2025-58626RumbleTalk Live Group Chat WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58625WP Flow Plus WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-03Fix
CVE-2025-58624Exchange Rates WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58623Event Feed for Eventbrite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58622Mobile Contact Line WordPress plugin broken access control4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58621PuzzleMe for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58620PDF for WPForms WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58618Pie Calendar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58617F4 Media Taxonomies WordPress plugin broken access control4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58616Frisbii Pay WordPress plugin broken access control6.5CNA v3.10.3%2025-09-03Fix
CVE-2025-58615WP Bannerize Pro WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2025-09-03Fix
CVE-2025-58614Tooltipy WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58613Posts Table with Search and Sort WordPress plugin broken access control5.3CNA v3.10.3%2025-09-03Fix
CVE-2025-58612PropertyHive WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58611Tickera WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-09-03Fix
CVE-2025-58610Gallery PhotoBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58609Latest Post Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58608MediaPress WordPress plugin local file inclusion7.5CNA v3.10.5%2025-09-03Fix
CVE-2025-58607Cookie Notice and Consent Banner for GDPR and CCPA Compliance WordPress plugin cross-site scripting6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58606SaasLauncher WordPress theme broken access control5.0CNA v3.10.2%2025-09-03Fix
CVE-2025-58605WP Delicious WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58604Mail Mint WordPress plugin SQL injection7.6CNA v3.10.4%2025-09-03Fix
CVE-2025-58603Surfer WordPress plugin broken access control5.3CNA v3.10.3%2025-09-03Fix
CVE-2025-58602If-So Dynamic Content Personalization WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58601Classified Listing WordPress plugin broken access control4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58600Paid Member Subscriptions WordPress plugin broken access control5.3CNA v3.10.4%2025-09-03Fix
CVE-2025-58599Order Delivery Date for WooCommerce WordPress plugin broken access control4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58598Klarna Order Management for WooCommerce WordPress plugin sensitive data exposure6.6CNA v3.10.3%2025-09-03Fix
CVE-2025-58597wpForo Forum WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.3%2025-09-03Fix
CVE-2025-58596MailOptin WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-09-03Fix
CVE-2025-58594Brizy WordPress plugin broken access control4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-58593Orbit Fox by ThemeIsle WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-09-03Fix
CVE-2025-58460Jenkins OpenTelemetry Plugin missing permission check allows capturing credentials4.2CISA ADP v3.10.2%2025-09-03Fix
CVE-2025-58459Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated4.3CISA ADP v3.10.3%2025-09-03Fix
CVE-2025-58458Jenkins Git Client Plugin file system information disclosure4.3CISA ADP v3.10.3%2025-09-03Fix
CVE-2025-58351Outline's Local File Storage feature can cause CSP bypass6.8CNA v3.10.4%2025-09-03Fix
CVE-2025-58272NTT EAST Web Caster V130 cross-site request forgery2.0CNA v4.00.1%2025-09-03
CVE-2025-58210Makeaholic WordPress theme broken access control9.8v3.10.3%2025-09-03Fix
CVE-2025-58176Dive's improper processing of custom urls can lead to remote code execution8.8CNA v3.19.3%2025-09-03Fix
CVE-2025-58163FreeScout's deserialization of untrusted data can lead to remote code execution8.6CNA v4.00.7%2025-09-03Fix
CVE-2025-58056Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9CNA v4.00.7%2025-09-03Fix
CVE-2025-57833Django is subject to SQL injection through its column aliases8.1v3.126.1%2025-09-03Exploit codeFix
CVE-2025-57806LearningCircuit local-deep-research local Deep Research's API keys are stored in plain text6.9CNA v4.00.1%2025-09-03Fix
CVE-2025-57151PHPGurukul Complaint Management System cross-site scripting8.8CISA ADP v3.10.6%2025-09-03
CVE-2025-57150PHPGurukul Complaint Management System cross-site scripting7.2CISA ADP v3.10.6%2025-09-03
CVE-2025-57149PHPGurukul Complaint Management System SQL injection6.5CISA ADP v3.10.4%2025-09-03
CVE-2025-57148PHPGurukul Online Shopping Portal unrestricted file upload9.1CISA ADP v3.10.5%2025-09-03
CVE-2025-57147PHPGurukul Complaint Management System SQL injection7.5CISA ADP v3.10.5%2025-09-03
CVE-2025-57146PHPGurukul Complaint Management System SQL injection8.1CISA ADP v3.10.4%2025-09-03
CVE-2025-57052DaveGamble cJSON out-of-bounds read9.8CISA ADP v3.10.7%2025-09-03Fix
CVE-2025-56803Figma Desktop OS command injection8.4CISA ADP v3.11.1%2025-09-03Exploit code
CVE-2025-56761Memos vulnerable to stored cross-site scripting5.4CISA ADP v3.10.3%2025-09-03
CVE-2025-56760Memos vulnerable to path traversal via the CreateResource endpoint4.3CISA ADP v3.10.4%2025-09-03
CVE-2025-56752Ruijie Rg-es205gc-p improper authentication9.4CISA ADP v3.10.5%2025-09-03
CVE-2025-56689Quest One Identity authentication bypass by spoofing4.6CISA ADP v3.11.4%2025-09-03
CVE-2025-56608Donbermoy Android Corona Virus Tracker App For India authentication bypass by spoofing4.2CISA ADP v3.10.3%2025-09-03
CVE-2025-56498Prolink2u PGN6401V Firmware PLDT WiFi Router's Prolink OS command injection5.3CISA ADP v3.11.7%2025-09-03Emerging Threats
CVE-2025-56435FoxCMS SQL injection5.3CISA ADP v3.10.4%2025-09-03
CVE-2025-56139Linkedin UI misrepresentation5.3CISA ADP v3.10.3%2025-09-03
CVE-2025-55944Slinkapp slink cross-site scripting6.1CISA ADP v3.10.3%2025-09-03
CVE-2025-55852Tenda AC8 stack-based buffer overflow7.5CISA ADP v3.10.4%2025-09-03Emerging Threats
CVE-2025-55748XWiki Platform's configuration files can be accessed through jsx and sx endpoints9.3CNA v4.01.8%2025-09-03NucleiFix
CVE-2025-55747XWiki Platform's configuration files can be accessed through the webjars API9.3CNA v4.01.7%2025-09-03NucleiFix
CVE-2025-55162Envoy: OAuth2 Filter Signout route will not clear cookies because of missing secure; flag6.3CNA v3.10.3%2025-09-03Fix
CVE-2025-54588Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults7.5CNA v3.10.5%2025-09-03Fix
CVE-2025-53694Sitecore Experience Manager (XM) information disclosure in ItemServices API7.5CNA v3.16.5%2025-09-03Exploit codeFix
CVE-2025-53693Sitecore Experience Manager (XM) HTML cache poisoning through Unsafe Reflections9.8CNA v3.119.4%2025-09-03Exploit codeFix
CVE-2025-53691Sitecore Experience remote code execution through insecure deserialization8.8CNA v3.11.6%2025-09-03Exploit codeFix
CVE-2025-53690Sitecore Multiple Products deserialization of untrusted data9.0CNA v3.160.6%2025-09-03KEVEmerging ThreatsFix
CVE-2025-52494Adacore Ada Web Server resource exhaustion7.5CISA ADP v3.10.4%2025-09-03Fix
CVE-2025-47421Crestron TOUCHSCREENS x70 privilege escalation via SCP login8.6CNA v4.00.4%2025-09-03Fix
CVE-2025-45805PHPGurukul Doctor Appointment Management System cross-site scripting7.6CISA ADP v3.10.4%2025-09-03Exploit code
CVE-2025-41000Cross-Frame Scripting (XFS) in BoomCMS2.1CNA v4.00.3%2025-09-03
CVE-2025-38678Linux kernel nf_tables device handling vulnerability7.8CNA v3.10.3%2025-09-03Exploit codeFix
CVE-2025-36193IBM Transformation Advisor incorrect permissions8.4CNA v3.10.1%2025-09-03Fix
CVE-2025-26210Deepseek-r1 cross-site scripting8.8CISA ADP v3.10.6%2025-09-03
CVE-2025-21041Samsung Mobile Secure Folder insecure storage of sensitive information6.2CNA v3.10.1%2025-09-03Fix
CVE-2025-21040Samsung S Assistant external broadcast receiver vulnerability5.1CNA v3.10.1%2025-09-03Fix
CVE-2025-21039Samsung S Assistant exceptional broadcast receiver vulnerability5.1CNA v3.10.1%2025-09-03Fix
CVE-2025-21038Samsung S Assistant exceptional broadcast receiver vulnerability5.1CNA v3.10.1%2025-09-03Fix
CVE-2025-21037Samsung Mobile Samsung Notes improper access control4.1CNA v3.10.2%2025-09-03Fix
CVE-2025-21036Samsung Mobile Samsung Notes improper access control5.0CNA v3.10.1%2025-09-03Fix
CVE-2025-21035Samsung Mobile Samsung Calendar improper access control4.6CNA v3.10.2%2025-09-03Fix
CVE-2025-21034Samsung Mobile Devices libsavsvc.so out-of-bounds write4.0CNA v3.10.1%2025-09-03Fix
CVE-2025-21033Samsung Mobile Devices ContactProvider improper access control4.0CNA v3.10.1%2025-09-03Fix
CVE-2025-21032Samsung Mobile Devices One UI Home improper access control5.9CNA v3.10.2%2025-09-03Fix
CVE-2025-21031Samsung Mobile Devices ImsService improper access control6.8CNA v3.10.1%2025-09-03Fix
CVE-2025-21030Samsung Mobile Devices AppPrelaunchManagerService improper permissions4.3CNA v3.10.2%2025-09-03
CVE-2025-21029Samsung Mobile Devices System UI improper permissions4.0CNA v3.10.1%2025-09-03Fix
CVE-2025-21028Samsung Mobile Devices ThemeManager improper privilege management5.5CNA v3.10.1%2025-09-03Fix
CVE-2025-21027Samsung Mobile Devices ImsService improper intent verification5.1CNA v3.10.1%2025-09-03Fix
CVE-2025-21026Samsung Mobile Devices ImsService improper permissions4.0CNA v3.10.1%2025-09-03Fix
CVE-2025-21025Samsung Mobile Devices MARsExemptionManager improper access control5.1CNA v3.10.1%2025-09-03Fix
CVE-2025-20336Cisco Session Initiation Protocol (SIP) Software device directory permissions information disclosure5.3CNA v3.10.4%2025-09-03Fix
CVE-2025-20335Cisco Session Initiation Protocol (SIP) Software device directory permissions arbitrary file write5.3CNA v3.10.4%2025-09-03Fix
CVE-2025-20330Cisco Unified Communications Manager IM and Presence cross-site scripting6.1CNA v3.10.3%2025-09-03Fix
CVE-2025-20328Cisco Webex Meetings cross-site scripting5.4CNA v3.10.2%2025-09-03Fix
CVE-2025-20326Cisco Unified Communications Manager cross-site request forgery4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-20291Cisco Webex Meetings open redirect4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-20287Cisco Evolved Programmable Network Manager arbitrary file upload4.3CNA v3.10.3%2025-09-03Fix
CVE-2025-20280Cisco Evolved Programmable Network Manager and Prime Infrastructure stored cross-site scripting4.8CNA v3.10.2%2025-09-03Fix
CVE-2025-20270Cisco Evolved Programmable Network Manager information disclosure4.3CNA v3.10.3%2025-09-03Fix
CVE-2025-9959Sandbox escape in smolagents Local Python execution environment via dunder attributes7.6CNA v3.10.3%2025-09-03Fix
CVE-2025-9928Projectworlds Travel Management System viewcategory.php SQL injection9.8v3.10.4%2025-09-03
CVE-2025-9927Projectworlds Travel Management System viewpackage.php SQL injection9.8v3.10.4%2025-09-03
CVE-2025-9926Projectworlds Travel Management System viewsubcategory.php SQL injection9.8v3.10.4%2025-09-03
CVE-2025-9925Projectworlds Travel Management System detail.php SQL injection9.8NVD v3.10.4%2025-09-03
CVE-2025-9924Projectworlds Travel Management System enquiry.php SQL injection9.8v3.10.4%2025-09-03
CVE-2025-9923Campcodes Sales and Inventory System index.php cross-site scripting6.1v3.10.4%2025-09-03
CVE-2025-9922Campcodes Sales and Inventory System index.php cross-site scripting6.1v3.10.4%2025-09-03
CVE-2025-9921code-projects POS Pharmacy System products.php cross-site scripting5.4v3.10.3%2025-09-03
CVE-2025-9920Campcodes Recruitment Management System index.php include file inclusion7.2v3.10.5%2025-09-03
CVE-2025-99191000projects Beauty Parlour Management System bwdates-reports-details.php SQL injection9.8v3.10.4%2025-09-03
CVE-2025-9901Red Hat Enterprise Linux 10 libsoup: Improper handling of HTTP vary header in libsoup caching5.9CNA v3.10.5%2025-09-03
CVE-2025-9867Google Chrome Downloads inappropriate implementation5.4CISA ADP v3.10.3%2025-09-03Fix
CVE-2025-9866Google Chrome extensions inappropriate implementation8.8CISA ADP v3.10.4%2025-09-03Fix
CVE-2025-9865Google Chrome Toolbar inappropriate implementation5.4CISA ADP v3.10.3%2025-09-03Fix
CVE-2025-9848ScriptAndTools Real Estate Management System userlist.php redirect7.5v3.10.6%2025-09-03
CVE-2025-9847ScriptAndTools Real Estate Management System register.php unrestricted upload9.8v3.10.4%2025-09-03
CVE-2025-9845code-projects Fruit Shop Management System products.php cross-site scripting5.4v3.10.3%2025-09-03
CVE-2025-9843Das Parking Management System 停车场管理系统 FindAll information disclosure7.5v3.10.5%2025-09-03
CVE-2025-9842Das Parking Management System 停车场管理系统 Search information disclosure7.5v3.10.5%2025-09-03
CVE-2025-9841code-projects Mobile Shop Management System AddNewProduct.php unrestricted upload8.8v3.10.3%2025-09-03
CVE-2025-9824Mautic User Enumeration via Response Timing5.9CNA v3.10.3%2025-09-03Fix
CVE-2025-9823Mautic reflected XSS in lead:addLeadTags Quick Add4.8CNA v4.00.3%2025-09-03Fix
CVE-2025-9822Mautic secret data extraction via elfinder5.5CNA v3.10.2%2025-09-03Fix
CVE-2025-9821Mautic SSRF via webhook function2.7CNA v3.10.3%2025-09-03Fix
CVE-2025-9817Null pointer dereference in Wireshark7.8CNA v3.10.2%2025-09-03Fix
CVE-2025-9785Misconfigured certificate validation with self-signed certificates for Print Deploy7.7CNA v4.00.1%2025-09-03Fix
CVE-2025-9378Vayu Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-09-03Fix
CVE-2025-9365Fuji Electric FRENIC-Loader 4 deserialization of untrusted data8.4CNA v4.00.2%2025-09-03Fix
CVE-2025-9260Fluent Forms WordPress plugin PHP object injection6.5CNA v3.10.6%2025-09-03Fix
CVE-2025-9219Post SMTP WordPress plugin missing authorization authenticated limited plugin option update4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-8663upKeeper Solutions upKeeper Manager sensitive information in log files8.8CNA v4.00.3%2025-09-03Fix
CVE-2025-8268AI Engine WordPress plugin unauthorized access6.5CNA v3.10.3%2025-09-03Fix
CVE-2025-7039Red Hat Enterprise Linux 10 glib: Buffer under-read on glib3.7CNA v3.10.4%2025-09-03Fix
CVE-2025-3701Malcure Malware Scanner WordPress plugin broken access control4.3CNA v3.10.2%2025-09-03Fix
CVE-2025-2416Akinsoft LimonDesk missing brute-force protection8.6CNA v3.10.3%2025-09-03Fix
CVE-2025-2415Akinsoft MyRezzta missing brute-force protection8.6CNA v3.10.3%2025-09-03Fix
CVE-2025-1740Authentication bypass in Akinsoft's MyRezzta9.8CNA v3.10.5%2025-09-03Fix
CVE-2025-0878XSS in Akinsoft's LimonDesk4.7CNA v3.10.2%2025-09-03Fix
CVE-2025-0280HCL Software Compass recoverable password storage7.5CNA v3.10.1%2025-09-03
CVE-2025-58178Command injection via sonarqube-scan-action GitHub action7.8CNA v3.11.1%2025-09-02Fix
CVE-2025-58162MobSF vulnerable to arbitrary file write (AR-Slip) via Absolute Path in .a Extraction6.5CNA v3.10.6%2025-09-02Fix
CVE-2025-58161MobSF download route path traversal1.3CNA v4.00.8%2025-09-02Fix
CVE-2025-57808esphome ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header8.1CNA v3.11.6%2025-09-02NucleiFix
CVE-2025-57778Out-of-bounds write to invalid source address when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.3%2025-09-02Fix
CVE-2025-57777Out-of-bounds write in displ2.dll when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.3%2025-09-02Fix
CVE-2025-57776Out-of-bounds write to invalid address when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.3%2025-09-02Fix
CVE-2025-57775Heap-based buffer overflow when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.3%2025-09-02Fix
CVE-2025-57774Out-of-bounds write of invalid data when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.3%2025-09-02Fix
CVE-2025-57616Meh.schizofreni Rust-ffmpeg use-after-free7.5CISA ADP v3.10.4%2025-09-02
CVE-2025-57615Meh.schizofreni Rust-ffmpeg null pointer dereference7.5CISA ADP v3.10.4%2025-09-02
CVE-2025-57614Meh.schizofreni Rust-ffmpeg integer overflow7.5CISA ADP v3.10.4%2025-09-02
CVE-2025-57613Meh.schizofreni Rust-ffmpeg null pointer dereference7.5CISA ADP v3.10.4%2025-09-02
CVE-2025-57612Meh.schizofreni Rust-ffmpeg null pointer dereference7.5CISA ADP v3.10.4%2025-09-02
CVE-2025-57611Meh.schizofreni Rust-ffmpeg null pointer dereference5.3CISA ADP v3.10.3%2025-09-02
CVE-2025-57140Ruisitech Ruisibi SQL injection9.8CISA ADP v3.10.4%2025-09-02
CVE-2025-56254PHPGurukul Employee Leave Management System insecure direct object reference4.3CISA ADP v3.10.2%2025-09-02
CVE-2025-55824Modstart Mostartcms command injection6.5CISA ADP v3.10.3%2025-09-02
CVE-2025-55476ShaneIsrael fireshare SQL injection6.5CISA ADP v3.10.3%2025-09-02Fix
CVE-2025-55474brufdev many-notes cross-site scripting6.1CISA ADP v3.10.4%2025-09-02Fix
CVE-2025-55473Asian Arts Talents Foundation AATF Website ip.php endpoint cross-site scripting6.1CISA ADP v3.10.3%2025-09-02
CVE-2025-55472tirreno SQL injection6.5CISA ADP v3.10.4%2025-09-02Fix
CVE-2025-55373Beakon privilege escalation5.3CISA ADP v3.10.4%2025-09-02
CVE-2025-55372Beakon An arbitrary file upload5.3CISA ADP v3.10.3%2025-09-02
CVE-2025-54599Bevy Events And Groups account takeover7.5CISA ADP v3.10.4%2025-09-02
CVE-2025-52551Copeland E2 Facility Management System proprietary protocol missing authentication9.3CNA v4.00.3%2025-09-02
CVE-2025-52550Copeland LP E3 Supervisory Control firmware upgrade packages are unsigned7.2NVD v3.10.2%2025-09-02Fix
CVE-2025-52549Copeland LP E3 Supervisory Control predictable root linux password generation9.8NVD v3.10.5%2025-09-02Fix
CVE-2025-52548Copeland LP E3 Supervisory Control Enabling SSH and Shellinabox on the vulnerable machine4.9NVD v3.10.3%2025-09-02Fix
CVE-2025-52547Copeland LP E3 Supervisory Control DoS to the application services7.5NVD v3.10.3%2025-09-02Fix
CVE-2025-52546Copeland LP E3 Supervisory Control stored XSS by uploading a specially crafted floor plan file6.1NVD v3.10.2%2025-09-02Fix
CVE-2025-52545Copeland LP E3 Supervisory Control privilege escalation in the application services7.5NVD v3.10.3%2025-09-02Fix
CVE-2025-52544Copeland LP E3 Supervisory Control arbitrary read file from the filesystem7.5NVD v3.10.4%2025-09-02Fix
CVE-2025-52543Copeland LP E3 Supervisory Control login to the application services using only the password hash7.5NVD v3.10.3%2025-09-02Fix
CVE-2025-51966Utools PDF preview functionality cross-site scripting6.1CISA ADP v3.10.3%2025-09-02
CVE-2025-50757WAVLINK Wl-wn535k3 command injection6.5CISA ADP v3.11.8%2025-09-02Emerging Threats
CVE-2025-50755WAVLINK Wl-wn535k3 command injection6.5CISA ADP v3.11.1%2025-09-02Emerging Threats
CVE-2025-50565Doubo Erp SQL injection6.5CISA ADP v3.10.2%2025-09-02
CVE-2025-46810openSUSE Tumbleweed packaging symlink following8.5CNA v4.00.2%2025-09-02Fix
CVE-2025-46047Silverpeas Core Username Enumeration vulnerability6.5CISA ADP v3.10.4%2025-09-02Exploit codeFix
CVE-2025-44017"Gunosy" App information disclosure5.1CNA v4.00.2%2025-09-02
CVE-2025-43726Dell Alienware Command Center 5.x (AWCC) link following6.7CNA v3.10.1%2025-09-02Fix
CVE-2025-41690Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions7.4CNA v3.10.3%2025-09-02Fix
CVE-2025-41031T-INNOVA Deporsite profile picture upload incorrect authorization6.9CNA v4.00.3%2025-09-02
CVE-2025-41030T-INNOVA Deporsite person search feature incorrect authorization6.9CNA v4.00.3%2025-09-02
CVE-2025-36162IBM DevOps Deploy / IBM UrbanCode Deploy information disclosure4.3CNA v3.10.2%2025-09-02Fix
CVE-2025-32100Samsung Exynos 980 out-of-bounds read6.5CISA ADP v3.10.2%2025-09-02Fix
CVE-2025-32098Samsung Magician improper privilege management5.3CISA ADP v3.10.2%2025-09-02Fix
CVE-2025-26416Google Android SkBmpStandardCodec.cpp out-of-bounds write9.8CISA ADP v3.10.6%2025-09-02Fix
CVE-2025-22442Google Android DevicePolicyManagerService.java privilege escalation7.0CISA ADP v3.10.1%2025-09-02Exploit codeFix
CVE-2025-22439Google Android ActionHandler.java privilege escalation7.3CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22438Google Android InputDispatcher.cpp use-after-free7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22437Google Android multiple files privilege escalation7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22435Google Android avdt_msg.cc memory corruption9.8CISA ADP v3.10.2%2025-09-02Fix
CVE-2025-22434Google Android PhoneWindowManager.java privilege escalation7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22433Google Android IntentForwarderActivity.java privilege escalation7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22431Google Android multiple locations denial of service5.5CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22430Google Android multiple files information disclosure5.5CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22429Google Android multiple locations privilege escalation9.8CISA ADP v3.10.2%2025-09-02Fix
CVE-2025-22428Google Android AppInfoBase.java privilege escalation7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22427Google Android privilege escalation7.3CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22423Google Android dng_ifd.cpp crash7.5CISA ADP v3.10.3%2025-09-02Fix
CVE-2025-22422Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22421Google Android NotificationContentDescription.kt information disclosure5.5CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22419Google Android multiple locations privilege escalation7.3CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22418Google Android multiple locations confused deputy7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22417Google Android Transition.java privilege escalation7.3CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-22416Google Android ChooserActivity.java privilege escalation7.8CISA ADP v3.10.1%2025-09-02Fix
CVE-2025-9840itsourcecode Sports Management System gametype.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9839itsourcecode Student Information Management System index.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9838itsourcecode Student Information Management System index.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9837itsourcecode Student Information Management System index.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9836macrozheng mall /order/paySuccess authorization bypass5.3CNA v4.00.3%2025-09-02
CVE-2025-9835macrozheng mall cancelUserOrder cancelOrder authorization4.3v3.10.3%2025-09-02
CVE-2025-9834PHPGurukul Small CRM registration.php cross-site scripting5.4v3.10.3%2025-09-02
CVE-2025-9833SourceCodester Online Farm Management System login.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9832SourceCodester Food Ordering Management System register-router.php SQL injection9.8v3.10.5%2025-09-02
CVE-2025-9831PHPGurukul Beauty Parlour Management System edit-services.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9830PHPGurukul Beauty Parlour Management System add-customer-services.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9829PHPGurukul Beauty Parlour Management System signup.php SQL injection9.8v3.10.5%2025-09-02
CVE-2025-9828Tenda CP6 uhttp sub_2B7D04 risky encryption5.9NVD v3.10.3%2025-09-02
CVE-2025-9815alaneuler batteryKid NSXPCListener PrivilegeHelper.swift missing authentication8.5CNA v4.00.3%2025-09-02
CVE-2025-9814PHPGurukul Beauty Parlour Management System contact-us.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9813Tenda CH22 SetSambaConf formSetSambaConf buffer overflow8.7CNA v4.00.9%2025-09-02Emerging Threats
CVE-2025-9812Tenda CH22 exeCommand formexeCommand buffer overflow8.7CNA v4.00.7%2025-09-02
CVE-2025-9811Campcodes Farm Management System reviewInput.php SQL injection9.8v3.10.4%2025-09-02
CVE-2025-9806Tenda F1202 Administrative shadow hard-coded credentials6.4NVD v3.10.2%2025-09-02
CVE-2025-9805SimStudioAI Sim route.ts server-side request forgery7.5v3.10.3%2025-09-02
CVE-2025-9802RemoteClinic profile.php SQL injection5.1CNA v4.00.3%2025-09-02
CVE-2025-9784Red Hat build of Apache Camel undertow: Undertow madeyoureset HTTP/2 DDoS vulnerability7.5CNA v3.12.3%2025-09-02Exploit codeFix
CVE-2025-9696SunPower PVS6 BluetoothLE interface hard-coded credentials9.4CNA v4.00.2%2025-09-02
CVE-2025-9573Command injection in extension TYPO3 Backup Plus (ns_backup)8.6CNA v4.01.1%2025-09-02
CVE-2025-9330Foxit PDF Reader Update service uncontrolled search path element local privilege escalation7.8CNA v3.00.2%2025-09-02Fix
CVE-2025-9329Foxit PDF Reader PRC File Parsing out-of-bounds read remote code execution7.8CNA v3.00.3%2025-09-02Fix
CVE-2025-9328Foxit PDF Reader PRC File Parsing out-of-bounds read remote code execution7.8CNA v3.00.3%2025-09-02Fix
CVE-2025-9327Foxit PDF Reader PRC File Parsing out-of-bounds read information disclosure5.5v3.10.2%2025-09-02Fix
CVE-2025-9326Foxit PDF Reader PRC File Parsing out-of-bounds read remote code execution7.8CNA v3.00.3%2025-09-02Fix
CVE-2025-9325Foxit PDF Reader PRC File Parsing out-of-bounds read information disclosure5.5v3.10.2%2025-09-02Fix
CVE-2025-9324Foxit PDF Reader PRC File Parsing out-of-bounds read information disclosure5.5v3.10.2%2025-09-02Fix
CVE-2025-9323Foxit PDF Reader JP2 File Parsing out-of-bounds read information disclosure5.5v3.10.2%2025-09-02Fix
CVE-2025-9276Cockroach Labs cockroach-k8s-request-cert Empty Root Password authentication bypass9.8CNA v3.00.7%2025-09-02
CVE-2025-9275Oxford Instruments Imaris Viewer IMS File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2025-09-02
CVE-2025-9274Oxford Instruments Imaris Viewer IMS File Parsing uninitialized pointer remote code execution7.8CNA v3.00.2%2025-09-02
CVE-2025-9273CData API Server MySQL Misconfiguration information disclosure4.3CNA v3.00.4%2025-09-02
CVE-2025-9189Out-of-bounds write when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.3%2025-09-02Fix
CVE-2025-9188Deserialization of untrusted data when parsing a DSB file with Digilent DASYLab8.5CNA v4.00.5%2025-09-02Fix
CVE-2025-8662OpenAM consortium OpenAM improper input validation2.3CNA v4.00.3%2025-09-02Fix
CVE-2025-8614NoMachine uncontrolled search path element local privilege escalation7.8CNA v3.00.3%2025-09-02Fix
CVE-2025-8613Vacron Camera ping command injection remote code execution7.2CNA v3.01.2%2025-09-02
CVE-2025-8302Realtek rtl81xx SDK Wi-Fi Driver rtwlanu heap-based buffer overflow local privilege escalation8.8CNA v3.00.2%2025-09-02
CVE-2025-8301Realtek RTL8811AU heap-based buffer overflow7.8CNA v3.00.2%2025-09-02
CVE-2025-8300Realtek rtl81xx SDK Wi-Fi Driver rtwlanu heap-based buffer overflow local privilege escalation8.8CNA v3.00.2%2025-09-02
CVE-2025-8299Realtek rtl81xx SDK Wi-Fi driver Teredo packet handler out-of-bounds write8.8CNA v3.00.2%2025-09-02
CVE-2025-8298Realtek RTL8811AU out-of-bounds read3.8CNA v3.00.1%2025-09-02
CVE-2025-7976Anritsu ShockLine CHX File Parsing deserialization of untrusted data remote code execution7.8CNA v3.00.2%2025-09-02
CVE-2025-7975Anritsu ShockLine CHX File Parsing directory traversal remote code execution7.8CNA v3.00.5%2025-09-02
CVE-2025-7974Rocket.Chat incorrect authorization information disclosure7.5v3.10.4%2025-09-02
CVE-2025-6685ATEN eco DC missing authorization privilege escalation8.8CNA v3.00.6%2025-09-02Fix
CVE-2025-6519Copeland LP E3 Supervisory Control insufficiently protected credentials9.8NVD v3.10.5%2025-09-02Fix
CVE-2025-5662Deserialization vulnerability in h2oai/h2o-39.8CNA v3.00.7%2025-09-02Fix
CVE-2025-2414Akinsoft OctoCloud missing brute-force protection8.6CNA v3.10.3%2025-09-02Fix
CVE-2025-2413Akinsoft ProKuafor missing brute-force protection8.6CNA v3.10.3%2025-09-02Fix
CVE-2025-0670IDOR in Akinsoft's ProKuafor4.7CNA v3.10.2%2025-09-02Fix
CVE-2025-0640IDOR in Akinsoft's OctoCloud4.7CNA v3.10.2%2025-09-02Fix
CVE-2025-58318DIAView authentication bypass5.8CNA v4.00.2%2025-09-01
CVE-2025-57799StreamVault can perform remote command execution8.7CNA v4.01.2%2025-09-01Fix
CVE-2025-55007Knowage vulnerable to server-side request forgery3.5CNA v3.10.2%2025-09-01Fix
CVE-2025-54857Seiko Solutions SkyBridge BASIC MB-A130 OS command improper neutralization9.3CNA v4.03.1%2025-09-01
CVE-2025-36133IBM App Connect Enterprise information disclosure5.9CNA v3.10.1%2025-09-01Fix
CVE-2025-33102IBM Concert Software information disclosure5.9CNA v3.10.2%2025-09-01Fix
CVE-2025-33099IBM Concert Software information disclosure5.9CNA v3.10.2%2025-09-01Fix
CVE-2025-33084IBM Concert Software information disclosure5.9CNA v3.10.2%2025-09-01Fix
CVE-2025-33083IBM Concert Software cross-site scripting5.4CNA v3.10.2%2025-09-01Fix
CVE-2025-33082IBM Concert Software cross-site scripting5.4CNA v3.10.2%2025-09-01Fix
CVE-2025-20708MediaTek chipsets out-of-bounds write in Modem8.8CISA ADP v3.10.3%2025-09-01Fix
CVE-2025-20707MediaTek chipsets use-after-free in geniezone6.7CISA ADP v3.10.1%2025-09-01Fix
CVE-2025-20706MediaTek chipsets use-after-free in mbrain7.8CISA ADP v3.10.1%2025-09-01Fix
CVE-2025-20705MediaTek chipsets use-after-free in monitor_hang7.8CISA ADP v3.10.1%2025-09-01Fix
CVE-2025-20704MediaTek chipsets out-of-bounds write in Modem8.0CISA ADP v3.10.3%2025-09-01Fix
CVE-2025-20703MediaTek chipsets out-of-bounds read in Modem6.5CISA ADP v3.10.3%2025-09-01Fix
CVE-2025-9810TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes5.8NVD v3.10.1%2025-09-01Fix
CVE-2025-9809libretro-common cdfs_open_cue_track out-of-bounds write9.8NVD v3.10.4%2025-09-01Fix
CVE-2025-9801SimStudioAI Sim path traversal8.1v3.10.7%2025-09-01
CVE-2025-9800SimStudioAI Sim HTML file route.ts import unrestricted upload6.1NVD v3.10.3%2025-09-01
CVE-2025-9799Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery2.3CNA v4.00.3%2025-09-01
CVE-2025-9797mrvautin expressCart Edit Product edit injection4.8CNA v4.00.3%2025-09-01
CVE-2025-9796thinkgem JeeSite EncodeUtils.java decodeUrl2 cross-site scripting4.1v3.10.4%2025-09-01Fix
CVE-2025-9795xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload5.4v3.10.2%2025-09-01
CVE-2025-9794Campcodes Computer Sales and Inventory System pos_transac.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9793itsourcecode Apartment Management System setting admin.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9792itsourcecode Apartment Management System e_all_info.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9791Tenda AC20 fromAdvSetMacMtuWan stack-based overflow9.8v3.10.9%2025-09-01
CVE-2025-9790SourceCodester Hotel Reservation System updateabout.php SQL injection9.8v3.10.5%2025-09-01
CVE-2025-9789SourceCodester Online Hotel Reservation System edituser.php SQL injection9.8v3.10.5%2025-09-01
CVE-2025-9788SourceCodester/Campcodes School Log Management System admin_class.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9786Campcodes Online Learning Management System teacher_signup.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9783TOTOLINK A702R formParentControl sub_418030 buffer overflow8.7CNA v4.00.7%2025-09-01
CVE-2025-9782TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow8.7CNA v4.00.7%2025-09-01
CVE-2025-9781TOTOLINK A702R formFilter sub_4162DC buffer overflow8.7CNA v4.00.7%2025-09-01
CVE-2025-9780TOTOLINK A702R formIpQoS sub_419BE0 buffer overflow8.7CNA v4.00.7%2025-09-01
CVE-2025-9779TOTOLINK A702R formFilter sub_4162DC buffer overflow8.7CNA v4.00.7%2025-09-01
CVE-2025-9778Tenda W12 Administrative shadow hard-coded credentials7.0v3.10.1%2025-09-01
CVE-2025-9775RemoteClinic edit-my-profile.php unrestricted upload9.8v3.10.5%2025-09-01
CVE-2025-9774RemoteClinic edit-patient.php information disclosure5.3CNA v4.00.4%2025-09-01
CVE-2025-9773RemoteClinic edit.php cross-site scripting6.1v3.10.4%2025-09-01
CVE-2025-9772RemoteClinic edit.php unrestricted upload9.8v3.10.5%2025-09-01
CVE-2025-9771SourceCodester Eye Clinic Management System search_index_Diagnosis.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9770Campcodes Hospital Management System Admin Dashboard Login admin SQL injection9.8v3.10.5%2025-09-01
CVE-2025-9769D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection6.2v3.129.0%2025-09-01Emerging Threats
CVE-2025-9768itsourcecode Sports Management System mode.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9767itsourcecode Sports Management System sporttype.php SQL injection9.8v3.10.5%2025-09-01
CVE-2025-9766itsourcecode Sports Management System facilitator.php SQL injection9.8v3.10.6%2025-09-01
CVE-2025-9765itsourcecode Sports Management System tournament_details.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9764itsourcecode Sports Management System resultdetails.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9763Campcodes Online Learning Management System student_signup.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9761Campcodes Online Feeds Product Inventory System Login index.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9760Portabilis i-Educar Matricula API matricula improper authorization8.8v3.10.4%2025-09-01
CVE-2025-9759Campcodes/SourceCodester Courier Management System ajax.php signup SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9758deepakmisal24 Chemical Inventory Management System inventory_form.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9757Campcodes/SourceCodester Courier Management System ajax.php login SQL injection9.8v3.10.5%2025-09-01
CVE-2025-9756PHPGurukul User Management System change-emailid.php SQL injection8.8v3.10.3%2025-09-01
CVE-2025-9755Khanakag-17 Library Management System index.php cross-site scripting6.1NVD v3.10.4%2025-09-01
CVE-2025-9754Campcodes Online Hospital Management System Edit Profile edit-profile.php cross-site scripting5.4v3.10.3%2025-09-01
CVE-2025-9753Campcodes Online Hospital Management System Patient Search patient-search.php cross-site scripting4.8v3.10.3%2025-09-01
CVE-2025-9752D-Link DIR-852 SOAP service soap.cgi soapcgi_main os command injection9.8v3.117.9%2025-09-01Emerging Threats
CVE-2025-9751Campcodes Online Learning Management System login.php SQL injection9.8v3.10.4%2025-09-01
CVE-2025-9570Sunnet｜eHRD CTMS arbitrary file reading through path traversal6.9CNA v4.00.5%2025-09-01
CVE-2025-9569Sunnet｜eHRD CTMS reflected cross-site scripting5.1CNA v4.00.3%2025-09-01
CVE-2025-9568Sunnet｜eHRD CTMS reflected cross-site scripting5.1CNA v4.00.3%2025-09-01
CVE-2025-9567Sunnet｜eHRD CTMS reflected cross-site scripting5.1CNA v4.00.3%2025-09-01
CVE-2025-9375xmltodict XML injection6.9CNA v4.00.4%2025-09-01Fix
CVE-2025-7731Information disclosure vulnerability in MELSEC iQ-F Series CPU module7.5CNA v3.10.3%2025-09-01
CVE-2025-7405Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES missing authentication7.3CNA v3.10.5%2025-09-01
CVE-2025-6507Deserialization of untrusted data in h2oai/h2o-39.8CNA v3.016.9%2025-09-01Fix
CVE-2025-3586Liferay Portal and DXP Instance Admin can execute code using Objects Actions and Validations7.5CNA v4.00.4%2025-09-01Fix
CVE-2025-2412Akinsoft QR Menu missing brute-force protection8.6CNA v3.10.3%2025-09-01Fix
CVE-2025-0656IBM Concert Software cross-site scripting6.1CNA v3.10.2%2025-09-01Fix
CVE-2025-0610CSRF in Akınsoft's QR menu8.6CNA v3.10.2%2025-09-01Fix