Skip to content
OpenAdvisories

Archive

8 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /8 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2025-4796 Public exploit

    Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover

    The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like em…

    Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) Web / CMS
  • High 8.7
    CVE-2012-10048 Public exploit

    Zenoss 3.x showDaemonXMLConfig Command Execution

    Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen() call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on…

    Zenoss Zenoss Core
  • High 8.7
    CVE-2012-10042 Public exploit

    Sflog! CMS 1.0 Arbitrary File Upload RCE

    Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with default credentials (admin:secret) and allows authenticated users to upload files via manage.php. The upload mechanism fa…

    Sflog! Sflog! CMS
  • High 8.4
    CVE-2012-10051 Public exploit

    Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow

    Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files. When a specially crafted load file is placed in the installation directory, the application fails to properly validate i…

    Photodex ProShow Producer
  • High 8.4
    CVE-2025-8088 Exploited · Ransomware Public exploit EPSS 94%

    Path traversal vulnerability in WinRAR

    A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and …

    Win-Rar WinRAR clamav Alpine
    KEV Aug 12, 2025
  • High 8.8
    CVE-2025-52914 Public exploit

    A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could …