Skip to content
OpenAdvisories

Archive

16 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /16 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34127 Public exploit

    Achat v0.150 SEH Buffer Overflow via UDP

    A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-suppli…

    Achat Software Achat Chat Server
  • Critical 9.3
    CVE-2025-34125 Public exploit

    D-Link DSP-W110A1 Cookie Command Injection

    An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to exe…

    D-Link DSP-W110A1 Network devices
  • Critical 9.3
    CVE-2025-34121 Public exploit

    Idera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE

    An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the web…

    Idera Up.Time Monitoring Station
  • Critical 9.3
    CVE-2025-34117 Public exploit EPSS 21%

    Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

    A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An …

    Netcore Netis Router firmware Router firmware
  • Critical 10.0
    CVE-2025-34300 Public exploit Scanner template EPSS 81%

    Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

    A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the  ciwweb.pl http://ciwweb.pl/  Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.

    Sawtooth Software Lighthouse Studio
  • Critical 10.0
    CVE-2025-29009 Public exploit

    WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce medical-prescription-attachment-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Medical Prescrip…

    Webkul Medical Prescription Attachment Plugin for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-52689 Public exploit EPSS 17%

    Weak Session ID Check in the OmniAccess Stellar Web Management Interface

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.

    Alcatel-Lucent OmniAccess Stellar Products
  • Critical 9.8
    CVE-2025-52688 Public exploit EPSS 37%

    Command Injection Vulnerability in the OmniAccess Stellar Web Management Interface

    Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.

    Alcatel-Lucent OmniAccess Stellar Products