Skip to content
OpenAdvisories

Archive

6 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /6 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.7
    CVE-2025-7769 Public exploit EPSS 23%

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced

    Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this en…

    Tigo Energy Cloud Connect Advanced
  • High 8.0
    CVE-2025-53786 Public exploit

    Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability

    On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following fur…

    Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  • High 7.5
    CVE-2025-23320 Public exploit

    NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker …

    NVIDIA Triton Inference Server
  • High 8.7
    CVE-2025-7771 Public exploit

    Code Execution / Escalation of Privileges in ThrottleStop

    ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the ru…

    TechPowerUp ThrottleStop
  • High 8.1
    CVE-2025-50286 Public exploit EPSS 16%

    A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plu…

  • High 7.5
    CVE-2025-51040 Public exploit

    Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html en…