Skip to content
OpenAdvisories

Archive

19 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /19 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

174 results · Feed

  • Medium 5.3
    CVE-2025-50579 Public exploit

    A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particular…

  • Medium 6.5
    CVE-2025-50926

    Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter…

  • Medium 6.5
    CVE-2025-52337

    An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v…

  • Medium 5.3
    CVE-2025-52338

    An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allow…

  • Critical 9.8
    CVE-2025-51543

    An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /admin…

  • Medium 4.9
    CVE-2025-51488

    moonshine Stored Cross-Site Scripting Vulnerability in Create Admin

    A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin.

    moonshine/moonshine Packagist
  • Medium 5.3
    CVE-2025-51539

    EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insuffici…

  • Medium 4.5
    CVE-2025-51487

    moonshine Stored Cross-Site Scripting Vulnerability in Create Article

    A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new…

    moonshine/moonshine Packagist
  • Medium 4.5
    CVE-2025-51489

    MoonShine Arbitrary File Upload Vulnerability

    A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/updating an Article and correctly execute arbitrary JavaScript when the file link is opened.

    moonshine/moonshine Packagist
  • Medium 5.3
    CVE-2025-51529 Public exploit

    Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin t…

  • Medium 6.5
    CVE-2025-51506

    In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueK…

  • Medium 4.9
    CVE-2025-51510

    MoonShine SQL Injection Vulnerability

    MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (version < 2.0.2) component.

    moonshine/moonshine Packagist
  • Medium 5.3
    CVE-2025-51540

    EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptog…

  • Critical 9.8
    CVE-2025-54336

    In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed …