Skip to content
OpenAdvisories

Archive

10 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /10 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2025-10200 Public exploit

    Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potent…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  • Critical 9.8
    CVE-2025-54123 Public exploit Scanner template EPSS 11%

    Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

    Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization i…

    SpectoLabs hoverfly github.com/SpectoLabs/hoverfly Go
  • Medium 4.9
    CVE-2025-10142 Public exploit

    PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection

    The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

    martins56 PagBank / PagSeguro Connect para WooCommerce Web / CMS
  • High 7.2
    CVE-2025-57642 Public exploit

    A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP sh…

  • High 7.8
    CVE-2025-57392 Public exploit

    BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyon…

  • Medium 6.1
    CVE-2025-57520 Public exploit

    Decap CMS Cross Site Scripting (XSS) vulnerability

    A Cross Site Scripting (XSS) vulnerability exists in Decap CMS thru 3.8.3. Input fields such as body, tags, title, and description are not properly sanitized before being rendered in the content preview pane. This enables an attacker to inject arbitrary JavaS…

    decap-cms npm