Skip to content
OpenAdvisories

Archive

31 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /31 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9747

    Koillection csrf_protection_controller.js cross-site request forgery

    A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controllers/csrf_protection_controller.js. Such manipulation leads to cross-site request forgery. The attack can be executed remotely. The exploit h…

  • Medium 4.7
    CVE-2025-9745 EPSS 13%

    D-Link DI-500WF jhttpd version_upgrade.asp os command injection

    A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the component jhttpd. The manipulation of the argument path leads to os command injection. The attack ma…

    D-Link DI-500WF Network devices
  • Medium 5.3
    CVE-2025-9732

    DCMTK dcm2img diybrpxt.h memory corruption

    A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of the component dcm2img. Such manipulation leads to memory corruption. Local access is required to approach this a…

    dcmtk dcmtk Debian Ubuntu
  • Medium 4.3
    CVE-2025-9728 Public exploit

    givanz Vvveb login.tpl cross site scripting

    A security vulnerability has been detected in givanz Vvveb 1.0.7.2. This affects an unknown part of the file app/template/user/login.tpl. Such manipulation of the argument Email/Password leads to cross site scripting. The attack can be executed remotely. The …

    givanz Vvveb
  • Medium 6.3
    CVE-2025-9727

    D-Link DIR-816L soap.cgi soapcgi_main os command injection

    A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgi_main of the file /soap.cgi. This manipulation of the argument service causes os command injection. Remote exploitation of the attack is possible. The expl…

    D-Link DIR-816L Network devices
  • Medium 5.5
    CVE-2025-5083

    Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function

    The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    milmor Amministrazione Trasparente Web / CMS