Skip to content
OpenAdvisories

Archive

1 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /1 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-9797

    mrvautin expressCart Edit Product edit injection

    A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/product/edit/ of the component Edit Product Page. This manipulation causes injection. The attack can be …

    mrvautin expressCart
  • Low 3.5
    CVE-2025-9796

    thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting

    A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/main/java/com/jeesite/common/codec/EncodeUtils.java. The manipulation results in cross site scripting. It is possible to launch the attack …

    thinkgem JeeSite
  • Low 3.5
    CVE-2025-55007

    Knowage vulnerable to server-side request forgery

    Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to…

    KnowageLabs Knowage-Server
  • Low 1.9
    CVE-2025-9778

    Tenda W12 Administrative shadow hard-coded credentials

    A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. The manipulation leads to hard-coded credentials. An attack has to be approached…

    Tenda W12
  • Low 3.5
    CVE-2025-9754

    Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting

    A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scri…

    Campcodes Online Hospital Management System
  • Low 2.4
    CVE-2025-9753

    Campcodes Online Hospital Management System Patient Search patient-search.php cross site scripting

    A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name M…

    Campcodes Online Hospital Management System