Skip to content
OpenAdvisories

Archive

16 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /16 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-41243 Public exploit Scanner template

    Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux

    Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: * The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gat…

    Spring Cloud Gateway org.springframework.cloud:spring-cloud-gateway-server-webflux Maven
  • Critical 9.3
    CVE-2009-20007 Public exploit

    Talkative IRC v0.4.4.16 Response Buffer Overflow

    Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, pot…

    Talkative Talkative IRC
  • Critical 9.3
    CVE-2009-20006 Public exploit

    osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

    osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated…

    Os Commerce osCommerce
  • Critical 9.3
    CVE-2009-20005 Public exploit

    InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

    A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient boun…

    InterSystems InterSystems Caché
  • High 7.5
    CVE-2025-41249 Public exploit

    CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

    The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions…

    VMware Spring Framework thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Critical 9.8
    CVE-2025-4688 Public exploit

    SQLi in BGS Interactive's SINAV.LINK Exam Result Module

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2.

    BGS Interactive SINAV.LINK Exam Result Module
  • Medium 4.3
    CVE-2025-2404 Public exploit

    XSS in Ubit Information Technologies' STOYS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting (XSS). This issue affects STOYS: from 2 before 20250916.

    Ubit Information Technologies STOYS