Skip to content
OpenAdvisories

Archive

4 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /4 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2025-58179 Public exploit Scanner template

    Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpoint

    Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optim…

    withastro astro @astrojs/cloudflare npm
  • High 8.8
    CVE-2025-48543 Exploited Public exploit

    In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use af…

    Google Android Android
    KEV Sep 4, 2025
  • High 7.8
    CVE-2025-32324 Public exploit

    In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deput…

    Google Android Android
  • High 7.3
    CVE-2025-22441 Public exploit

    In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary j…

    Google Android Android
  • High 7.3
    CVE-2025-26443 Public exploit

    In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from un…

    Google Android Android
  • High 7.2
    CVE-2025-6085 Public exploit

    Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload

    The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'upload_media' function in all versions up to, and including, 1.5.10. This makes it possible for authenticated attackers, with Adm…

    integromat Make Connector Web / CMS
  • High 7.2
    CVE-2025-9519 Public exploit

    Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode

    The Easy Timer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.1 via the plugin's shortcodes. This is due to insufficient restriction of shortcode attributes. This makes it possible for authenticated attac…

    Kleor Easy Timer Web / CMS