Skip to content
OpenAdvisories

Archive

30 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /30 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.7
    CVE-2012-10062 Public exploit

    XAMPP WebDAV PHP Upload Authentication Bypass RCE

    A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration allows remote authenticated attackers to upload and execute arbitrary PHP code. The WebDAV service, accessible via /webdav/, accepts HTTP PUT requests using de…

    Apache Friends XAMPP
  • High 8.4
    CVE-2010-10017 Public exploit

    WM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U File

    WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler (SEH) records and …

    WM Downloader WM Downloader
  • Critical 9.3
    CVE-2011-10032 Public exploit

    Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

    Sunway ForceControl version 6.1 SP3 and earlier contains a stack-based buffer overflow vulnerability in the SNMP NetDBServer service, which listens on TCP port 2001. The flaw is triggered when the service receives a specially crafted packet using opcode 0x57 …

    Sunway ForceControl
  • High 8.6
    CVE-2009-20008 Public exploit

    Green Dam 3.17 URL Processing Buffer Overflow

    Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-…

    Zhengzhou Jinhui Computer System Engineering Co. Ltd. ; Beijing Dazheng Human Language Technology Academy Green Dam Youth Escort
  • Critical 9.3
    CVE-2009-20010 Public exploit

    Dogfood CRM spell.php RCE

    Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed by the un…

    Dogfood CRM Dogfood CRM
  • Critical 10.0
    CVE-2009-20011 Public exploit

    ContentKeeper Web Appliance < 125.10 RCE via mimencode

    ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to u…

    ContentKeeper Technologies ContentKeeper Web Appliance
  • High 8.7
    CVE-2005-10004 Public exploit

    Cacti graph_view.php RCE via graph_start Parameter Injection

    Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. Thi…

    Raxnet/Ian Berry Cacti cacti Debian
  • Critical 10.0
    CVE-2010-10016 Public exploit

    BS.Player 2.57 Buffer Overflow via M3U Playlist Import

    BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occur…

    BS.Player BS.Player Free and Pro Editions
  • Critical 9.3
    CVE-2009-20009 Public exploit

    Belkin Bulldog Plus Web Service Buffer Overflow

    Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properl…

    Belkin International Bulldog Plus UPS Monitoring Software
  • High 7.5
    CVE-2008-20001 Public exploit

    activePDF WebGrabber ActiveX Control Buffer Overflow

    activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the conte…

    activePDF WebGrabber