Skip to content
OpenAdvisories

Archive

17 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /17 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Low 3.5
    CVE-2025-9096

    ExpressGateway express-gateway REST Endpoint apps.js cross site scripting

    A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the…

    ExpressGateway express-gateway express-gateway npm
  • High 7.5
    CVE-2025-7342

    VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

    A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclu…

    Kubernetes Image Builder
  • Low 3.5
    CVE-2025-9095

    ExpressGateway express-gateway REST Endpoint users.js cross site scripting

    A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiat…

    ExpressGateway express-gateway express-gateway npm
  • Medium 4.3
    CVE-2025-9094

    ThingsBoard Add Gateway special elements used in a template engine

    A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotel…

  • Medium 5.3
    CVE-2025-9093

    BuzzFeed App com.buzzfeed.android AndroidManifest.xml improper export of android application components

    A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation leads to improper export of android application components. The …

  • Low 2.5
    CVE-2025-9091

    Tenda AC20 shadow hard-coded credentials

    A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etc_ro/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The …

    Tenda AC20
  • Medium 6.3
    CVE-2025-9090 Public exploit EPSS 17%

    Tenda AC20 Telnet Service telnet websFormDefine command injection

    A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploi…

    Tenda AC20