Skip to content
OpenAdvisories

Archive

13 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /13 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.3
    CVE-2025-10374

    Shenzhen Sixun Business Management System OperatorStop improper authorization

    A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of the file /Adm/OperatorStop. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. Th…

    Shenzhen Sixun Software Business Management System
  • High 7.3
    CVE-2025-10371

    eCharge Hardy Barth Salia PLCC api.php unrestricted upload

    A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from …

    eCharge Hardy Barth Salia PLCC
  • High 7.3
    CVE-2025-10359

    Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection

    A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is no…

    WAVLINK WL-WN578W2
  • High 7.3
    CVE-2025-10358

    Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection

    A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated remotely. …

    WAVLINK WL-WN578W2