Skip to content
OpenAdvisories

Archive

12 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /12 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-58434 Public exploit Scanner template EPSS 84%

    Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication …

    FlowiseAI Flowise flowise npm
  • Critical 9.3
    CVE-2025-10364

    Unauthenticated Arbitrary Command Injection in Evertz SDVN

    The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network …

    Evertz 3080ipx-10G cVIP CC Access Server
  • Critical 9.3
    CVE-2025-10365

    Authentication Bypass in Evertz SDVN

    The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network …

    Evertz 3080ipx-10G cVIP CC Access Server
  • Critical 9.8
    CVE-2025-9556

    CVE-2025-9556

    Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchain…

    Langchaingo Langchaingo
  • Critical 9.1
    CVE-2025-8699

    Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use t…

    KioSoft Stored Value Unattended Payment Solution
  • Critical 9.8
    CVE-2025-10266

    NewType Infortech｜NUP Portal - SQL Injection

    NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

    NewType Infortech NUP Portal
  • Critical 10.0
    CVE-2025-10264

    Digiever｜NVR - Exposure of Sensitive Information

    Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.

    Digiever DS-16x00-RM UHD DS-4100-RM DS-4200-RM UHD
  • Critical 9.8
    CVE-2024-45434

    OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Blueto…

  • Critical 9.8
    CVE-2025-55835

    File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filter…

  • Critical 9.1
    CVE-2025-45583

    Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authent…