CVEs published September 28, 2025
36 CVEs were published on September 28, 2025: 0 critical, 5 high.
- Published
- 36
- Critical
- 0
- High
- 5
- Medium
- 31
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- D-Link DIR-823X
- 7
- code-projects Simple Scheduling System
- 6
- Tenda AC18
- 3
- Campcodes Online Learning Management System
- 2
- CodeAstro Online Leave Application
- 2
- itsourcecode Open Source Job Portal
- 2
- Campcodes Advanced Online Voting Management System
- 1
- Campcodes Computer Sales and Inventory System
- 1
- code-projects E-Commerce Website
- 1
- code-projects Project Monitoring System
- 1
High 5
- CVE-2025-11123Tenda AC18 saveAutoQos stack-based overflowTenda AC18
- CVE-2025-11122Tenda AC18 WizardHandle stack-based overflowTenda AC18
- CVE-2025-11120Tenda AC8 SetServerConfig formSetServerConfig buffer overflowTenda AC8
- CVE-2025-11117Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflowTenda CH22
- CVE-2025-11091Tenda AC21 SetStaticRouteCfg sscanf buffer overflowTenda AC21
Medium, low and unrated 31
- CVE-2025-11125langleyfcu Online Banking System Error Message connection_error.php cross site scriptinglangleyfcu Online Banking System
- CVE-2025-11124code-projects Project Monitoring System postjob.php cross site scriptingcode-projects Project Monitoring System
- CVE-2025-11121Tenda AC18 AdvSetLanip command injectionTenda AC18
- CVE-2025-11119itsourcecode Hostel Management System POST Request index.php cross site scriptingitsourcecode Hostel Management System
- CVE-2025-11118CodeAstro Student Grading System adminLogin.php sql injectionCodeAstro Student Grading System
- CVE-2025-11116code-projects Simple Scheduling System add.home.php sql injectioncode-projects Simple Scheduling System
- CVE-2025-11115code-projects Simple Scheduling System addtime.php sql injectioncode-projects Simple Scheduling System
- CVE-2025-11114CodeAstro Online Leave Application leaveAplicationForm.php sql injectionCodeAstro Online Leave Application
- CVE-2025-11113CodeAstro Online Leave Application signup.php sql injectionCodeAstro Online Leave Application
- CVE-2025-11112PHPGurukul Employee Record Management System myprofile.php cross site scriptingPHPGurukul Employee Record Management System
- CVE-2025-11111Campcodes Advanced Online Voting Management System candidates_edit.php sql injectionCampcodes Advanced Online Voting Management System
- CVE-2025-11110Campcodes Online Learning Management System school_year.php sql injectionCampcodes Online Learning Management System
- CVE-2025-11109Campcodes Computer Sales and Inventory System us_edit.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-11108code-projects Simple Scheduling System addroom.php sql injectioncode-projects Simple Scheduling System
- CVE-2025-11107code-projects Simple Scheduling System addcourse.php sql injectioncode-projects Simple Scheduling System
- CVE-2025-11106code-projects Simple Scheduling System addfaculty.php sql injectioncode-projects Simple Scheduling System
- CVE-2025-11105code-projects Simple Scheduling System addsubject.php sql injectioncode-projects Simple Scheduling System
- CVE-2025-11104CodeAstro Electricity Billing System bill.php sql injectionCodeAstro Electricity Billing System
- CVE-2025-11103Projectworlds Online Tours and Travels change-image.php unrestricted uploadProjectworlds Online Tours and Travels
- CVE-2025-11102Campcodes Online Learning Management System edit_content.php sql injectionCampcodes Online Learning Management System
- CVE-2025-11101itsourcecode Open Source Job Portal index.php sql injectionitsourcecode Open Source Job Portal
- CVE-2025-11100D-Link DIR-823X set_wifi_blacklists uci_set command injectionD-Link DIR-823X
- CVE-2025-11099D-Link DIR-823X delete_prohibiting uci_del command injectionD-Link DIR-823X
- CVE-2025-11098D-Link DIR-823X set_wifi_blacklists command injectionD-Link DIR-823X
- CVE-2025-11097D-Link DIR-823X set_device_name command injectionD-Link DIR-823X
- CVE-2025-11096D-Link DIR-823X diag_traceroute command injectionD-Link DIR-823X
- CVE-2025-11095D-Link DIR-823X delete_offline_device command injectionD-Link DIR-823X
- CVE-2025-11094code-projects E-Commerce Website admin_product_details.php sql injectioncode-projects E-Commerce Website
- CVE-2025-11092D-Link DIR-823X set_switch_settings sub_412E7C command injectionD-Link DIR-823X
- CVE-2025-11090itsourcecode Open Source Job Portal index.php sql injectionitsourcecode Open Source Job Portal
- CVE-2025-11089kidaze CourseSelectionSystem COUNT3s4.php sql injectionkidaze CourseSelectionSystem