Skip to content
OpenAdvisories

Archive

22 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /22 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-54812

    Apache Log4cxx: Improper HTML escaping in HTMLLayout

    Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoreticall…

    Apache Software Foundation Apache Log4cxx log4cxx log4cxx Debian Ubuntu
  • Low —
    GHSA-655h-hg88-5qmf

    Rust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety

    The API of `xcb::Connection` has constructors which allow an arbitrary `RawFd` to be used as a socket connection. On either failure of these constructors or on the drop of `Connection`, it closes the associated file descriptor. Thus, a program which uses an `…

    xcb crates.io
  • Low 2.5
    CVE-2025-55745

    UnoPim Quick Export feature is vulnerable to CSV injection

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula injection, in the Quick Export feature. This vulnerability allows attackers to…

    unopim unopim unopim/unopim Packagist
  • Low 3.5
    CVE-2025-55455

    DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendt…