Skip to content
OpenAdvisories

Archive

14 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /14 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2025-8971 Public exploit

    itsourcecode Online Tour and Travel Management System travellers.php sql injection

    A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument val-username leads to sql injection. The attack…

    itsourcecode Online Tour and Travel Management System
  • Critical 10.0
    CVE-2025-20265 Public exploit EPSS 16%

    Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

    A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.  This vulnerability is du…

    Cisco Cisco Firepower Management Center Network devices
  • Critical 9.4
    CVE-2025-8875 Exploited Public exploit

    Insecure Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

    N-able N-central
    KEV Aug 13, 2025
  • High 8.8
    CVE-2025-8714 Public exploit

    PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

    Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall…

    postgresql-15 postgresql-9.3 postgresql-17 postgresql15 Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2025-8943 Public exploit Scanner template EPSS 75%

    Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers

    The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermo…

    flowise npm
  • Medium 6.0
    CVE-2025-0309 Public exploit

    Netskope Client Local Elevation of Privileges

    An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates an…

    Netskope Netskope Client