Skip to content
OpenAdvisories

Archive

1 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /1 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • Medium 4.3
    CVE-2025-9755

    Khanakag-17 Library Management System index.php cross site scripting

    A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploit…

    Khanakag-17 Library Management System
  • Low 3.5
    CVE-2025-9754

    Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting

    A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scri…

    Campcodes Online Hospital Management System
  • Low 2.4
    CVE-2025-9753

    Campcodes Online Hospital Management System Patient Search patient-search.php cross site scripting

    A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name M…

    Campcodes Online Hospital Management System
  • High 7.3
    CVE-2025-9752 EPSS 19%

    D-Link DIR-852 SOAP Service soap.cgi soapcgi_main os command injection

    A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launc…

    D-Link DIR-852 Network devices