Skip to content
OpenAdvisories

Archive

25 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /25 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-9429

    mtons mblog Post submit cross site scripting

    A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the file /post/submit of the component Post Handler. The manipulation of the argument content/title/ leads to cross site scripting. It is possibl…

    mtons mblog
  • Low 2.4
    CVE-2025-9422

    oitcode samarium Team Image team cross site scripting

    A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has…

    oitcode samarium
  • Low 3.8
    CVE-2025-3456

    On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-c

    On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-conf…

    Arista Networks EOS Network devices
  • Low 2.4
    CVE-2025-9416

    oitcode samarium Pages Image webpage cross site scripting

    A security flaw has been discovered in oitcode samarium up to 0.9.6. This vulnerability affects unknown code of the file /cms/webpage/ of the component Pages Image Handler. The manipulation results in cross site scripting. The attack may be performed from a r…

    oitcode samarium
  • Low 3.5
    CVE-2025-9407

    mtons mblog profile cross site scripting

    A flaw has been found in mtons mblog up to 3.5.0. Affected by this vulnerability is an unknown functionality of the file /settings/profile. Executing manipulation of the argument signature can lead to cross site scripting. The attack may be launched remotely.…

    mtons mblog
  • Low 2.4
    CVE-2025-9404

    Scada-LTS Folder pointHierarchySLTS cross site scripting

    A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to ini…

  • Low 3.3
    CVE-2025-9403

    jqlang jq JSON jq_test.c run_jq_tests assertion

    A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been pub…

    jqlang jq jq jq Debian Ubuntu Azure Linux
  • Low 3.7
    CVE-2025-9401

    HuangDou UTCMS Login login.php comparison

    A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison. The attack can be execut…

    HuangDou UTCMS