Skip to content
OpenAdvisories

Archive

3 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /3 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-8513

    Caixin News App com.caixin.news AndroidManifest.xml improper export of android application components

    A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android applica…

    Caixin News App
  • Medium 5.3
    CVE-2025-8512

    TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components

    A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to imprope…

    TVB Big Big Shop App
  • Medium 6.1
    CVE-2024-41177

    Apache Zeppelin: XSS in the Helium module

    Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue.

    Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-web Maven
  • Medium 4.3
    CVE-2025-8505

    495300897 wx-shop cross-site request forgery

    A vulnerability has been found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remote…

    495300897 wx-shop
  • Medium 6.3
    CVE-2025-8504

    code-projects Kitchen Treasure userregistration.php unrestricted upload

    A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate…

    code-projects Kitchen Treasure
  • Medium 6.3
    CVE-2025-8500

    code-projects Human Resource Integrated System action.php sql injection

    A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The manipulation of the argument content leads to sql injection…

    code-projects Human Resource Integrated System
  • Medium 6.4
    CVE-2025-52131

    The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.

    xwiki-contrib Mocca Calendar
  • Medium 6.4
    CVE-2025-52132

    The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.

    xwiki-contrib Mocca Calendar
  • Medium 6.4
    CVE-2025-52133

    The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

    xwiki-contrib Mocca Calendar
  • Medium 6.5
    CVE-2025-54349

    In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

    ES iperf3 iperf3 iperf3 Debian Ubuntu Azure Linux Alpine