Skip to content
OpenAdvisories

Archive

4 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /4 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.3
    CVE-2013-10054 Public exploit

    LibrettoCMS File Manager Arbitrary File Upload

    An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plug…

    LibrettoCMS LibrettoCMS
  • High 8.5
    CVE-2013-10052 Public exploit

    ZPanel zsudo Local Privilege Escalation

    ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks. However, when misconfigured in /etc/sudoers, zsudo can be invoked by low-privileged users to execute arbitrary commands as root. This flaw…

    ZPanel Project ZPanel
  • Medium 4.7
    CVE-2025-8518 Public exploit

    givanz Vvveb Code Editor code.php save code injection

    A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be …

    givanz Vvveb
  • Medium 6.3
    CVE-2025-8517 Public exploit

    givanz Vvveb session fixiation

    A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in session fixiation. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.0.7 is recommended to …

    givanz Vvveb
  • High 7.3
    CVE-2025-36604 Public exploit Scanner template EPSS 70%

    Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command (…

    Dell Unity
  • High 8.8
    CVE-2025-20701 Public exploit

    In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This co…

    Airoha Technology AB156x, AB157x, AB158x, AB159x series
  • High 8.8
    CVE-2025-20700 Public exploit

    In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE proto…

    Airoha Technology AB156x, AB157x, AB158x, AB159x series, AB1627
  • Critical 9.8
    CVE-2025-50341 Public exploit

    A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can m…

  • Medium 6.5
    CVE-2025-50420 Public exploit

    An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via…

    poppler poppler Debian Ubuntu
  • Medium 4.3
    CVE-2025-50340 Public exploit

    An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authent…

    sogo Ubuntu
  • Critical 9.6
    CVE-2025-50754 Public exploit

    Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A mal…

  • Low 2.9
    CVE-2025-50422 Public exploit

    Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_…

    cairographics Cairo cairo cairo Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2025-46206 Public exploit

    An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursio…

    mupdf mupdf Debian Ubuntu
  • High 8.4
    CVE-2025-51726 Public exploit

    CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulner…

  • Medium 5.3
    CVE-2025-54554 Public exploit

    tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive infor…

    Tera Insights tiCrypt
  • Medium 6.4
    CVE-2025-54962 Public exploit

    /edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such…

    thiagoralves OpenPLC_v3