Skip to content
OpenAdvisories

Archive

20 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /20 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-9239

    elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption

    A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argu…

    elunez eladmin
  • Low 3.5
    CVE-2025-9237

    CodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting

    A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/my_account.php?edit_account of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site sc…

    CodeAstro Ecommerce Website
  • Low 3.5
    CVE-2025-9235

    Scada-LTS compound_events.shtm cross site scripting

    A flaw has been found in Scada-LTS up to 2.7.8.1. The impacted element is an unknown function of the file compound_events.shtm. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit …

  • Low 3.5
    CVE-2025-9234

    Scada-LTS maintenance_events.shtm cross site scripting

    A vulnerability was detected in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file maintenance_events.shtm. The manipulation of the argument Alias results in cross site scripting. The attack can be executed remotely. The exploit …

  • Low 3.5
    CVE-2025-9233

    Scada-LTS view_edit.shtm cross site scripting

    A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit …

  • Low 1.0
    CVE-2025-8448

    CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized …

    Schneider Electric Schneider Eelctric EcoStruxure Building Operation Workstation EcoStruxure Enterprise Server ICS / OT
  • Low 3.5
    CVE-2025-9193

    TOTVS Portal Meu RH Password Reset redirect

    A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. Impacted is an unknown function of the component Password Reset Handler. Executing manipulation of the argument redirectUrl can lead to open redirect. The attack may be performed from a remote locati…

    TOTVS Portal Meu RH