Skip to content
OpenAdvisories

Archive

28 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /28 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.4
    CVE-2025-48979

    An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privile…

    Ubiquiti UISP Application Network devices
  • Low 2.4
    CVE-2025-9591

    ZrLog Theme Configuration Form config cross site scripting

    A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripti…

  • Low 3.5
    CVE-2025-9590

    Weaver E-Mobile Mobile Management Platform cross site scripting

    A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown functionality. The manipulation of the argument gohome leads to cross site scripting. The attack can be initiated remotel…

    Weaver E-Mobile Mobile Management Platform
  • Low 2.5
    CVE-2025-9589

    Cudy WR1200EA shadow default password

    A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is ass…

    Cudy WR1200EA
  • Low 2.5
    CVE-2025-9577

    TOTOLINK X2000R Administrative shadow.sample default credentials

    A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally…

    Toto Link X2000R
  • Low 2.5
    CVE-2025-9576

    seeedstudio ReSpeaker Administrative shadow default credentials

    A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component Administrative Interface. The manipulation leads to use of default credentials. An attack has to be approached locally…

    seeedstudio ReSpeaker
  • Low 2.4
    CVE-2025-51643 Public exploit

    Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) that is accessible without authenti…