Skip to content
OpenAdvisories

Archive

9 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /9 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.1
    CVE-2025-8277

    Libssh: memory exhaustion via repeated key exchange in libssh

    A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crash…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Low 3.1
    CVE-2025-40803

    A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device exposes c…

    Siemens RUGGEDCOM RST2428P ICS / OT
  • Low 3.1
    CVE-2025-40802

    A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device may be su…

    Siemens RUGGEDCOM RST2428P ICS / OT
  • Low 3.5
    CVE-2025-9111

    WPBOT < 7.1.0 - Admin+ Stored XSS

    The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disal…

    Web / CMS
  • Low 3.8
    CVE-2025-8889 Public exploit

    Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload

    The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

    Web / CMS
  • Low 3.4
    CVE-2025-42927

    Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)

    SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful exploitation of known vulnerabilities in the outdated OpenSSL library would allow user with high system privileges to access and modify sy…

    SAP SAP NetWeaver AS Java (Adobe Document Service)
  • Low 3.1
    CVE-2025-42914

    Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)

    Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integ…

    SAP SAP HCM (My Timesheet Fiori 2.0 application)
  • Low 3.1
    CVE-2025-42913

    Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)

    Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integ…

    SAP SAP HCM (My Timesheet Fiori 2.0 application)
  • Low 3.5
    CVE-2025-10117

    SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting

    A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross si…

    SourceCodester Simple To-Do List System