Skip to content
OpenAdvisories

Archive

12 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /12 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-10327 Public exploit EPSS 10%

    MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

    A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/api/playlist/shuffle.php. Executing manipulation of the argument playlist can lead to os command injection.…

    MiczFlor RPi-Jukebox-RFID
  • Critical 9.8
    CVE-2025-58434 Public exploit Scanner template EPSS 84%

    Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

    Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication …

    FlowiseAI Flowise flowise npm
  • Medium 5.3
    CVE-2025-59139 Public exploit

    Hono has Body Limit Middleware Bypass

    Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the `bodyLimit` middleware could allow bypassing the configured request body size limit when conflicting HTTP headers were present. The…

    honojs hono hono npm
  • High 8.8
    CVE-2025-21042 Exploited Public exploit EPSS 36%

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitr…

    Samsung Mobile Samsung Mobile Devices
    KEV Nov 10, 2025
  • High 8.8
    CVE-2025-55319 Public exploit

    Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

    Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.

    Microsoft Visual Studio Code
  • Medium 6.3
    CVE-2025-55996 Public exploit

    Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface