Skip to content
OpenAdvisories

Archive

5 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /5 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-10027

    itsourcecode POS Point of Sale System 2512.php cross site scripting

    A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/2512.php. This manipulation of the argument scripts causes …

    itsourcecode POS Point of Sale System
  • Low 3.8
    CVE-2025-57807

    ImageMagick BlobStream Forward-Seek Under-Allocation

    ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end without increasing c…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu NuGet
  • Low 3.5
    CVE-2025-10026

    itsourcecode POS Point of Sale System -complex_header.php cross site scripting

    A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/-complex_header.php. The manipulation of the argument scri…

    itsourcecode POS Point of Sale System
  • Low 3.1
    CVE-2025-10014

    elunez eladmin Email Address updateEmail updateUserEmail improper authorization

    A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The at…

    elunez eladmin
  • Low 3.3
    CVE-2025-26461

    In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the …

    Google Android Android
  • Low 2.7
    CVE-2025-58866

    WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info site-info-dashboard-widget allows Retrieve Embedded Sensitive Data.This issue affects Site Info: from n/a through <= 1.1.

    Rami Yushuvaev Site Info
  • Low 3.8
    CVE-2025-58827

    WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in PickPlugins Job Board Manager job-board-manager allows Code Injection.This issue affects Job Board Manager: from n/a through <= 2.1.61.

    PickPlugins Job Board Manager
  • Low 3.5
    CVE-2025-58816

    WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Carousel Slider for Ele…

    Plugin Devs Product Carousel Slider for Elementor
  • Low 3.2
    CVE-2024-21977

    Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RD…

    AMD AMD Ryzen™ 7000 Series Desktop Processors AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Desktop Processors