Skip to content
OpenAdvisories

Archive

8 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /8 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-8743

    Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting

    A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /data_source_edit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross si…

  • Low 3.7
    CVE-2025-8742

    macrozheng mall Admin Login excessive authentication

    A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attempts. The a…

    macrozheng mall
  • Low 3.7
    CVE-2025-8741

    macrozheng mall login cleartext transmission

    A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The …

    macrozheng mall
  • Low 2.4
    CVE-2025-8740

    zhenfeng13 My-Blog Category save cross site scripting

    A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cr…

    zhenfeng13 My-Blog
  • Low 3.5
    CVE-2025-8737

    zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect

    A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of th…

    zlt2000 microservices-platform
  • Low 3.3
    CVE-2025-8735

    GNU cflow Lexer c.c yylex null pointer dereference

    A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally…

    GNU cflow cflow cflow Debian Ubuntu
  • Low 3.3
    CVE-2025-8732

    libxml2 xmlcatalog xmlParseSGMLCatalog recursion

    A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requireme…

    libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  • Low 3.4
    CVE-2025-54940

    An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerabili…

    WP Engine Advanced Custom Fields Web / CMS
  • Low 3.6
    CVE-2025-55188 Public exploit

    7-Zip before 25.01 does not always properly handle symbolic links during extraction.

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu