Skip to content
OpenAdvisories

Archive

29 August 2025

Vulnerabilities first published on this day (UTC), newest first.

165 results · Feed

  • High 7.5
    CVE-2025-55763 Public exploit

    Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote cod…

  • Medium 5.4
    CVE-2025-55579 Public exploit

    SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. T…

  • Critical 9.8

    SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDire…

  • Medium 4.0

    Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because th…

  • High 8.4

    An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cry…