Skip to content
OpenAdvisories

Archive

13 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /13 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.7
    CVE-2011-10009 Public exploit

    S40 CMS 0.4.2 Path Traversal

    S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely wit…

    S40 CMS S40 CMS
  • High 8.7
    CVE-2012-10056 Public exploit

    PHP Volunteer Management System 1.0.2 Arbitrary File Upload

    PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality. Authenticated users can upload files to the mods/documents/uploads/ directory without any restriction on file type or extension. Becau…

    PHP Volunteer Management PHP Volunteer Management
  • High 8.4
    CVE-2011-10012 Public exploit

    NetOp Remote Control Client 9.5 .dws File Buffer Overflow

    NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds chec…

    NetOp Remote Control Client
  • High 8.4
    CVE-2012-10057 Public exploit

    Lattice Semiconductor ispVM System 18.0.2 XCF File Handling Buffer Overflow

    Lattice Semiconductor ispVM System v18.0.2 contains a buffer overflow vulnerability in its handling of .xcf project files. When parsing the version attribute of the ispXCF XML tag, the application fails to properly validate input length, allowing a specially …

    Lattice Semiconductor ispVM System
  • High 8.7
    CVE-2011-10014 Public exploit

    GTA SA-MP server.cfg Buffer Overflow

    GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 is vulnerable to a stack-based buffer overflow triggered by parsing a malformed server.cfg configuration file. The vulnerability allows local attackers to execute arbitrary code when the server binary…

    SA-MP Team San Andreas Multiplayer
  • High 7.3
    CVE-2025-8924 Public exploit

    Campcodes Online Water Billing System viewbill.php sql injection

    A vulnerability was identified in Campcodes Online Water Billing System 1.0. This issue affects some unknown processing of the file /viewbill.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha…

    Campcodes Online Water Billing System
  • High 8.2
    CVE-2025-55163 Public exploit

    Netty MadeYouReset HTTP/2 DDoS Vulnerability

    Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2025-8671 Public exploit

    CVE-2025-8671

    A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening stre…

    varnish-software Wind River Systems Fastly SUSE Linux Linux Debian Ubuntu Alpine crates.io