Skip to content
OpenAdvisories

Archive

22 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /22 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.6
    CVE-2025-59532 Public exploit

    Codex has sandbox bypass due to bug in path configuration logic

    Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where th…

    OpenAI codex @openai/codex npm
  • Critical 10.0
    CVE-2025-59528 Public exploit Scanner template EPSS 87%

    Flowise has Remote Code Execution vulnerability

    Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server…

    FlowiseAI Flowise flowise npm
  • Medium 6.5
    CVE-2025-57926 Public exploit

    WordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Passster content-protector allows Stored XSS.This issue affects Passster: from n/a through <= 4.2.18.

    WP Chill Passster
  • Medium 5.3
    CVE-2025-58226 Public exploit Scanner template

    WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.16.16 - Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery interactive-3d-flipbook-powered-physics-engine allows Retrieve Embedded Sensitive Data.This issue affects 3D FlipBook – PD…

    iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery
  • High 7.1
    CVE-2025-9983 Public exploit

    Lack of Authentication for RTSP stream

    GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The ve…

    GALAYOU G2
  • Medium 6.5
    CVE-2025-55886 Public exploit

    An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` paramet…

  • High 7.3
    CVE-2025-55888 Public exploit

    Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker ca…

  • Medium 6.1
    CVE-2025-55887 Public exploit

    Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists i…

  • Medium 6.3
    CVE-2025-55885 Public exploit

    SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote att…

  • Medium 5.4
    CVE-2025-52367 Public exploit

    Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via th…