Skip to content
OpenAdvisories

Archive

2 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /2 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

140 results · Feed

  • Medium 6.5
    CVE-2025-55472

    SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerabil…

  • Medium 5.3
    CVE-2025-55373

    Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges t…

  • Medium 6.5
    CVE-2025-55824

    ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execu…

  • Medium 5.3
    CVE-2025-55372

    An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code v…

  • Medium 6.5
    CVE-2025-50755

    Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the com…

  • Medium 6.5
    CVE-2025-50565 Public exploit

    Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initia…

  • Medium 6.5
    CVE-2025-50757

    Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the use…

  • Medium 6.5
    CVE-2025-32100

    An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 12…

  • Medium 5.3
    CVE-2025-32098

    An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges…

  • Medium 6.5
    CVE-2025-46047 Public exploit

    Silverpeas Core Username Enumeration Vulnerability

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.

    org.silverpeas.core:silverpeas-core Maven
  • High 7.5
    CVE-2025-57616

    An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A use-after-free vulnerability in the write_interlea…

  • High 7.5
    CVE-2025-57615

    An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new…

  • High 7.5
    CVE-2025-57614

    An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid input vulnerability in …

  • High 7.5
    CVE-2025-57613

    An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the inpu…

  • Critical 9.8
    CVE-2025-57140

    rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path.

  • High 7.5
    CVE-2025-57612

    An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name()…

  • Medium 5.3
    CVE-2025-57611

    An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump()…

  • Medium 6.1
    CVE-2025-51966

    A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1. When a user pr…

  • High 7.5
    CVE-2025-54599

    The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover…

  • Medium 4.3
    CVE-2025-56254

    PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in le…