Skip to content
OpenAdvisories

Archive

22 July 2025

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.0
    CVE-2025-7766 Public exploit

    Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference

    Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.

  • High 8.8
    CVE-2015-10140 Public exploit

    Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion

    The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.

  • High 7.8
    CVE-2025-38352 Exploited Public exploit

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

    In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() …

    KEV Sep 4, 2025
  • High 8.8
    CVE-2025-51865 Public exploit

    Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object…

  • High 8.8
    CVE-2025-51482 Public exploit Scanner template

    Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows re…