Skip to content
OpenAdvisories

Archive

19 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /19 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-59714

    In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

    Internet2 Grouper
  • Medium 4.8
    CVE-2025-59715

    SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.

    SMSEagle SMSEagle
  • Medium 5.4
    CVE-2025-59717

    @digitalocean/do-markdownit has Type Confusion vulnerability

    In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).

    DigitalOcean @digitalocean/do-markdownit @digitalocean/do-markdownit npm
  • Medium 6.1
    CVE-2025-59689 Exploited

    Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a…

    Libraesva Email Security Gateway
    KEV Sep 29, 2025
  • Medium 6.5
    CVE-2025-57396

    Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework…

  • Medium 6.5
    CVE-2025-57296

    Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which pro…

  • Medium 6.1
    CVE-2025-56762 Public exploit

    Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.

  • Medium 5.3
    CVE-2025-56869

    Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write …