Skip to content
OpenAdvisories

Archive

13 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /13 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-55193

    Active Record logging vulnerable to ANSI escape injection

    Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences…

    rails rails rails rails Debian Ubuntu Wolfi RubyGems
  • Low 3.7
    CVE-2025-8927

    mtons mblog Verification Code send_code excessive authentication

    A vulnerability was determined in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality of the file /email/send_code of the component Verification Code Handler. The manipulation of the argument email leads to improper restriction of ex…

    mtons mblog
  • Low 2.4
    CVE-2025-8920

    Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting

    A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino lea…

    Portabilis i-Diario
  • Low 2.4
    CVE-2025-8919

    Portabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scripting

    A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross sit…

    Portabilis i-Diario
  • Low 3.1
    CVE-2025-2498

    Insufficient Granularity of Access Control in GitLab

    An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP rest…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 2.4
    CVE-2025-8918

    Portabilis i-Educar Editar educar_instituicao_cad.php cross site scripting

    A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educar_instituicao_cad.php of the component Editar Page. The manipulation of the argument neighborhood name leads to cross site scrip…

    Portabilis i-Educar
  • Low 3.7
    CVE-2025-53859

    NGINX ngx_mail_smtp_module vulnerability

    NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to th…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi