Skip to content
OpenAdvisories

Archive

August 2025

Vulnerabilities first published in this month (UTC), newest first.

← July 2025 2025 / August September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-51643 Public exploit

    Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) that is accessible without authenti…

  • Low 2.0
    CVE-2025-3639 Public exploit

    Liferay Portal Login Bypass Vulnerability

    Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 and 7.3 GA through update 36 all…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Low 3.0
    CVE-2025-52136 Public exploit

    In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Sup…

    emqx emqx
  • Low 3.6
    CVE-2025-55188 Public exploit

    7-Zip before 25.01 does not always properly handle symbolic links during extraction.

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  • Low 2.0
    CVE-2025-8573 Public exploit

    Concrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page

    Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.  Version 8 was not affected. A rogue admin could set up a malicious folder containing XSS to which users could be directed upon login. The Concrete …

    Concrete CMS Concrete CMS concrete5/concrete5 Packagist
  • Low 2.4
    CVE-2025-8550 Public exploit

    atjiu pybbs list cross site scripting

    A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The a…

    atjiu pybbs
  • Low 2.9
    CVE-2025-50422 Public exploit

    Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_…

    cairographics Cairo cairo cairo Debian Ubuntu
  • Low 3.2
    CVE-2023-44976 Public exploit

    Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecifie…

    Hangzhou Shunwang Rentdrv2