Skip to content
OpenAdvisories

Archive

5 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /5 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-8571 Public exploit

    Concrete CMS 9 through 9.4.2 and below 8.5.21 is vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page

    Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to m…

    Concrete CMS Concrete CMS concrete5/concrete5 Packagist
  • Medium 6.9
    CVE-2012-10023 Public exploit

    FreeFloat FTP Server USER Command Buffer Overflow

    A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is…

    Freefloat FTP Server
  • Medium 6.6
    CVE-2025-54874 Public exploit

    OpenJPEG allows OOB heap memory write in opj_jp2_read_header

    OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.

    uclouvain openjpeg qt6-qtwebengine insighttoolkit4 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.4
    CVE-2025-50592 Public exploit

    Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.

  • Medium 6.5
    CVE-2025-45512 Public exploit

    A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attac…

    u-boot u-boot u-boot-nezha Debian Ubuntu
  • Medium 6.5
    CVE-2025-52078 Public exploit

    File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to…