Skip to content
OpenAdvisories

Archive

3 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /3 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.3
    CVE-2025-58064

    CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package

    CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting (XSS) vulnerability. Ability to exploit could be triggered b…

    ckeditor ckeditor5 ckeditor5 @ckeditor/ckeditor5-clipboard npm
  • Low 2.4
    CVE-2025-9929

    code-projects Responsive Blog Site blogs_view.php cross site scripting

    A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogs_view.php. Executing manipulation of the argument product_code/gen_name/product_name/supplier can lead to cross site scripting. It is p…

    code-projects Responsive Blog Site
  • Low 2.9
    CVE-2025-58056

    Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

    Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline ch…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Low 2.4
    CVE-2025-9921

    code-projects POS Pharmacy System products.php cross site scripting

    A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can …

    code-projects POS Pharmacy System
  • Low 2.1
    CVE-2025-41000

    Cross-Frame Scripting (XFS) in BoomCMS

    Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London. XFS is a web attack technique that exploits specific browser bugs to spy on users via JavaScript. This type of attack is based on social engineering and depends entirely on the brows…

    BoomCMS BoomCMS
  • Low 2.7
    CVE-2025-9821

    SSRF via webhook function

    SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed DetailsWhen sending webhooks, the destination is not validated, causing SSRF. ImpactBypass …

    Mautic Mautic mautic/core Packagist
  • Low 3.3
    CVE-2023-3666

    Sticky Side Buttons < 2.0.0 - Admin+ Stored XSS

    The Sticky Side Buttons WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed…

    Web / CMS
  • Low 3.7
    CVE-2025-58272

    Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views…

    NTT EAST NTT WEST Web Caster V130 Web Caster V130
  • Low 3.7
    CVE-2025-7039

    Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

    A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerab…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Low 3.5
    CVE-2025-9845

    code-projects Fruit Shop Management System products.php cross site scripting

    A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument product_code/gen_name/product_name/supplier leads to cross…

    code-projects Fruit Shop Management System