Skip to content
OpenAdvisories

Archive

11 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /11 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-32640 Public exploit Scanner template EPSS 76%

    MasaCMS SQL Injection vulnerability

    MASA CMS is an Enterprise Content Management platform based on open source technology. Versions prior to 7.4.5, 7.3.12, and 7.2.7 contain a SQL injection vulnerability in the `processAsyncObject` method that can result in remote code execution. Versions 7.4.5…

    MasaCMS MasaCMS
  • Critical 9.8
    CVE-2025-53187

    Unauthenticated RCE

    Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files…

    ABB ASPECT ICS / OT
  • Critical 9.4
    CVE-2012-10040 Public exploit

    Openfiler v2.x NetworkCard Command Execution

    Openfiler v2.x contains a command injection vulnerability in the system.html page. The device parameter is used to instantiate a NetworkCard object, whose constructor in network.inc calls exec() with unsanitized input. An authenticated attacker can exploit th…

    Openfiler Openfiler
  • Critical 9.4
    CVE-2012-10039 Public exploit

    ZEN Load Balancer Filelog Command Execution

    ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec() call without sanitation. An authenticated attacker can inject arbitrary shell com…

    ZEN Load Balancer ZEN Load Balancer
  • Critical 9.3
    CVE-2012-10038 Public exploit

    Auxilium RateMyPet Arbitrary File Upload RCE

    Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php. The banner upload feature fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files. These files ar…

    Auxilium RateMyPet
  • Critical 9.3
    CVE-2012-10037 Public exploit

    PhpTax pfilez Parameter Exec Remote Code Injection

    PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec() function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under…

    PhpTax PhpTax
  • Critical 9.8
    CVE-2025-8853

    2100 Technology｜Official Document Management System - Authentication Bypass

    Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user.

    2100 Technology Official Document Management System
  • Critical 9.8
    CVE-2025-45146

    ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager…