Skip to content
OpenAdvisories

Archive

29 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /29 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34164

    NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow

    A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service (DoS) or execute arbitrary code.

    NetSupport Software NetSupport Manager
  • Critical 10.0
    CVE-2025-58159

    WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)

    WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was identified, caused by improper validation of uploaded files. The application allows an attacker to upload files with arbitrary filenames, in…

    LabRedesCefetRJ WeGIA
  • Critical 9.3
    CVE-2025-52856

    VioStor

    An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1…

    QNAP Systems VioStor
  • Critical 9.8
    CVE-2025-8857

    Changing｜Clinic Image System - Use of Hard-coded Credentials

    Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.

    Changing Clinic Image System
  • Critical 9.8
    CVE-2025-8861

    Changing｜TSA - Missing Authentication

    TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.

    Changing TSA
  • Critical 9.8
    CVE-2025-9605

    Tenda AC21/AC23 GetParentControlInfo stack-based overflow

    A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can b…

    Tenda AC23 AC21
  • Critical 9.8
    CVE-2024-46484

    TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testse…

  • Critical 9.8
    CVE-2025-44033

    SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDire…