Skip to content
OpenAdvisories

Archive

5 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /5 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58371 Public exploit

    Roo Code is vulnerable to command injection via GitHub actions workflow

    Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input and achieve Remote Co…

    RooCodeInc Roo-Code
  • Critical 9.8
    CVE-2025-39682 Exploited Public exploit

    tls: fix handling of zero-length records on the rx_list

    In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • Medium 6.0
    CVE-2025-9998 Public exploit

    Improper validation of packets sequencing

    The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop.

    arcinfo PcVue
  • High 7.6
    CVE-2025-58789 Public exploit

    WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows SQL Injection.This issue affects WP Full Stripe Free: from n/a through <= 8.2.5.

    themeisle WP Full Stripe Free
  • High 7.6
    CVE-2025-58788 Public exploit

    WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: fro…

    Saad Iqbal License Manager for WooCommerce Web / CMS
  • High 7.2
    CVE-2025-58780 Public exploit

    index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed b…

    ScienceLogic SL1