Skip to content
OpenAdvisories

Archive

21 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /21 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

128 results · Feed

  • Critical 9.8
    CVE-2025-52395

    An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password…

  • Critical 9.8
    CVE-2025-52352

    Aikaan IoT management platform v3.25.0325-5-g2e9c59796 provides a configuration to disable user sign-up in distributed …

  • High 7.5
    CVE-2025-52194

    A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing mal…

    libsndfile libsndfile Ubuntu Azure Linux
  • High 8.8
    CVE-2025-52351

    Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email…

  • Medium 5.4
    CVE-2025-51818

    MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute a…

  • High 7.0
    CVE-2025-51989

    HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an …

  • High 8.8
    CVE-2025-51606

    hippo4j Includes Hard Coded Secret Key in JWT Creation

    hippo4j 1.0.0 to 1.5.0, uses a hard-coded secret key in its JWT (JSON Web Token) creation. This allows attackers with access to the source code or compiled binary to forge valid access tokens and impersonate any user, including privileged ones such as "admin"…

    cn.hippo4j:hippo4j-core Maven
  • Medium 5.3
    CVE-2025-47184

    An XML external entities (XXE) injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1…