Skip to content
OpenAdvisories

Archive

20 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /20 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-55746 Public exploit Scanner template

    Directus allows unauthenticated file upload and file modification due to lacking input sanitization

    Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without …

    directus directus directus @directus/api npm
  • Critical 9.3
    CVE-2011-10026 Public exploit

    Spreecommerce < 0.50.x API RCE

    Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamica…

    Spreecommerce Spreecommerce spree rd_searchlogic RubyGems
  • Critical 9.3
    CVE-2010-20103 Public exploit Scanner template EPSS 15%

    ProFTPD 1.3.3c Backdoor Command Execution

    A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell command…

    ProFTPD Project ProFTPD (Professional FTP Daemon)
  • Critical 9.3
    CVE-2010-20049 Public exploit

    LeapFTP < 3.1.x Stack Buffer Overflow

    LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filename longer than 528 bytes, the application fails to properly bound-check the input and overwrites the…

    LeapWare LeapFTP
  • Critical 9.3
    CVE-2010-20059 Public exploit

    FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution

    FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.

    iXsystems FreeNAS
  • Critical 9.3
    CVE-2025-9074 Public exploit

    Docker Desktop allows unauthenticated access to Docker Engine API from containers

    A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolati…

    Docker Docker Desktop
  • Critical 10.0
    CVE-2025-48148 Public exploit EPSS 18%

    WordPress StoreKeeper for WooCommerce Plugin <= 14.4.4 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V. StoreKeeper for WooCommerce storekeeper-for-woocommerce allows Using Malicious Files.This issue affects StoreKeeper for WooCommerce: from n/a through <= 14.4.4.

    StoreKeeper StoreKeeper for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-53580 Public exploit

    WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through < 15.6.9.

    Quantum Cloud Simple Business Directory Pro
  • Critical 9.1
    CVE-2025-54677 Public exploit

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Using Malicious Files.This issue affects Online Booking & Scheduling Calendar for WordPress by…

    vcita Online Booking & Scheduling Calendar for WordPress by vcita Web / CMS
  • Critical 9.3
    CVE-2025-54726 Public exploit Scanner template

    WordPress JS Archive List Plugin < 6.1.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows SQL Injection.This issue affects JS Archive List: from n/a through < 6.1.6.

    Miguel Useche JS Archive List