Skip to content
OpenAdvisories

Archive

19 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /19 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-38561 Public exploit

    ksmbd: fix Preauh_HashValue race condition

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashVal…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.3
    CVE-2025-9140 Public exploit

    Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection

    A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this issue is some unknown functionality of the file /crm/crmapi/erp/tabdetail_moduleSave.php. The manipulation of the argument getvaluestring l…

    Shanghai Lingdang Information Technology Lingdang CRM
  • Critical 9.8
    CVE-2025-8723 Public exploit EPSS 19%

    Cloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook

    The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispatch() method in all versions up to, and including, 1.5.6. This makes it possibl…

    mecanik Cloudflare Image Resizing – Optimize & Accelerate Your Images Web / CMS
  • Critical 9.8
    CVE-2025-6758 Public exploit

    Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'

    The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'imic_agent_register' function in all versions up to, and including, 3.6. This is due to a lack of restriction in the registration role. T…

    imithemes Real Spaces - WordPress Properties Directory Theme Web / CMS
  • Medium 6.5
    CVE-2025-50461 Public exploit

    A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script w…

  • Medium 5.3
    CVE-2025-50579 Public exploit

    A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particular…

  • Medium 5.3
    CVE-2025-51529 Public exploit

    Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin t…