Skip to content
OpenAdvisories

Archive

15 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /15 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2025-6202 Public exploit

    Phoenix: Rowhammer attack on Hynix DDR5 devices

    Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.

    SK Hynix DDR5
  • Critical 9.8
    CVE-2025-59359 Public exploit

    OS command injection in Chaos Mesh via the cleanTcs mutation

    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.

    github.com/chaos-mesh/chaos-mesh Go
  • High 8.8
    CVE-2025-50944 Public exploit

    An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes…

  • High 8.8
    CVE-2025-50110 Public exploit

    An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, t…

  • Low 3.7
    CVE-2025-59376 Public exploit

    mcp-kubernetes-server has a Command Injection vulnerability

    feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a w…

    feiskyer mcp-kubernetes-server mcp-kubernetes-server PyPI
  • Critical 9.8
    CVE-2025-46408 Public exploit

    An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_Ht…

  • Medium 6.5
    CVE-2025-57176 Public exploit

    On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpi…

    Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas
  • Critical 9.8
    CVE-2025-57174 Public exploit

    An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and …