Skip to content
OpenAdvisories

Archive

27 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /27 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

130 results · Feed

  • Medium 6.1
    CVE-2025-50978

    In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are han…

  • Critical 9.8
    CVE-2025-50428 Public exploit

    In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.…

  • Critical 9.1
    CVE-2025-50989 EPSS 11%

    OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint …

    opnsense OPNsense
  • Critical 9.8
    CVE-2025-50972

    SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via…

  • Medium 5.6
    CVE-2025-50985

    diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web i…

  • Medium 5.6
    CVE-2025-50986

    diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its ad…

  • Critical 9.8
    CVE-2025-52122 Public exploit

    The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability

    Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).

    solspace/craft-freeform Packagist
  • High 7.0
    CVE-2025-51667

    simple-admin-core SQL Injection vulnerability

    An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations.

    github.com/suyuan32/simple-admin-core Go
  • Medium 6.5
    CVE-2025-54598

    The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete a…

  • Medium 5.8
    CVE-2025-56694

    Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to …