Skip to content
OpenAdvisories

Archive

22 August 2025

Vulnerabilities first published on this day (UTC), newest first.

48 results · Clear filters · Feed

  • High 8.8

    QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).

  • High 8.8

    An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attacker…

  • High 7.3

    D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-…

  • High 7.8

    An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMedia…

  • High 8.8

    An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries…

  • High 8.8

    OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability.

  • High 7.8

    Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via…

  • High 8.1

    An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client-supplied Origin header …