Skip to content
OpenAdvisories

Archive

11 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /11 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.0
    CVE-2025-8061 Public exploit

    A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 driv…

    Lenovo Dispatcher 3.0 Driver Dispatcher 3.1 Driver
  • High 8.0
    CVE-2025-58060 Public exploit

    cups has Authentication bypass with AuthType Negotiate

    OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password…

    OpenPrinting cups cups cups Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2025-8570 Public exploit

    BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

    The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated at…

    beyondcart BeyondCart Connector Web / CMS
  • High 7.5
    CVE-2025-8422 Public exploit

    Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

    The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the content…

    fassionstorage Propovoice: All-in-One Client Management System Web / CMS
  • Medium 6.5
    CVE-2025-9776 Public exploit

    CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import

    The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter a…

    catfolders CatFolders – WordPress Media Library Folders & Categories Web / CMS