Skip to content
OpenAdvisories

Archive

13 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /13 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-10373

    Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting

    A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educar_turma_tipo_cad.php. Such manipulation of the argument nm_tipo leads to cross site scripting. It is possible …

    Portabilis i-Educar
  • Low 3.5
    CVE-2025-10372

    Portabilis i-Educar educar_modulo_cad.php cross site scripting

    A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_modulo_cad.php. This manipulation of the argument nm_tipo/descricao causes cross site scripting. It is possible to initiate the atta…

    Portabilis i-Educar
  • Low 3.5
    CVE-2025-10370 Public exploit

    MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

    A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the file /htdocs/userScripts.php. The manipulation of the argument Custom script leads to cross site scripting. The attack is possible to be ca…

    MiczFlor RPi-Jukebox-RFID
  • Low 3.5
    CVE-2025-10369

    MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting

    A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This affects an unknown part of the file /htdocs/cardRegisterNew.php. Executing manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been p…

    MiczFlor RPi-Jukebox-RFID
  • Low 3.5
    CVE-2025-10368

    MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting

    A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/manageFilesFolders.php. Performing manipulation results in cross site scripting. Remote exploitation of the attack is …

    MiczFlor RPi-Jukebox-RFID
  • Low 3.5
    CVE-2025-10367

    MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting

    A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/cardEdit.php. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exp…

    MiczFlor RPi-Jukebox-RFID
  • Low 3.5
    CVE-2025-10366

    MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting

    A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/inc.setWlanIpMail.php. This manipulation of the argument Email address causes cross site scripting. The attack may be initiated remotely. The e…

    MiczFlor RPi-Jukebox-RFID
  • Low 3.5
    CVE-2025-10340

    WhatCD Gazelle Commit Message change_log.php cross site scripting

    A vulnerability was determined in WhatCD Gazelle up to 63b337026d49b5cf63ce4be20fdabdc880112fa3. The affected element is an unknown function of the file /sections/tools/managers/change_log.php of the component Commit Message Handler. Executing manipulation of…

    WhatCD Gazelle
  • Low 3.5
    CVE-2025-10332

    cdevroe unmark info.php cross site scripting

    A vulnerability was found in cdevroe unmark up to 1.9.3. Impacted is an unknown function of the file application/views/marks/info.php. Performing manipulation of the argument Title results in cross site scripting. The attack is possible to be carried out remo…

    cdevroe unmark
  • Low 3.5
    CVE-2025-10331

    cdevroe unmark Marks.php cross site scripting

    A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /application/controllers/Marks.php. Such manipulation of the argument Title leads to cross site scripting. The attack can be executed remotely…

    cdevroe unmark