Skip to content
OpenAdvisories

Archive

20 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /20 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

89 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53522

    Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be…

    Six Apart Movable Type Premium Cloud Edition Movable Type Cloud Edition Movable Type Premium (Software Edition)
  • Medium 6.9
    CVE-2025-57791 Public exploit EPSS 39%

    Argument Injection Vulnerability in CommServe

    A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low priv…

    Commvault CommCell
  • Medium 5.3
    CVE-2025-57789 Scanner template

    Vulnerability in Initial Administrator Login Process

    During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

    Commvault CommCell
  • Medium 6.5
    CVE-2025-55499

    Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysT…

  • Medium 6.5
    CVE-2025-50864

    elysia-cors Origin Validation Error

    An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing (CORS) restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's C…

    @elysiajs/cors npm
  • Medium 6.9
    CVE-2025-57788 Public exploit Scanner template

    Unauthorized API Access Risk

    A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk.

    Commvault CommCell
  • Medium 4.8
    CVE-2025-51990 Scanner template

    XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Administr…

  • Medium 6.9
    CVE-2025-54364

    Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. option_de…

    Microsoft Knack az py3.10-knack Debian Ubuntu Wolfi
  • Medium 6.9
    CVE-2025-54363

    Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. extract_f…

    Microsoft Knack az py3.10-knack Debian Ubuntu Wolfi