Skip to content
OpenAdvisories

Archive

22 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /22 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-10823

    axboe fio options.c str_buffer_pattern_cb null pointer dereference

    A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been mad…

    axboe fio fio fio Debian Ubuntu Azure Linux
  • Low 2.7
    CVE-2025-59526

    Mailgen: HTML injection vulnerability in plaintext e-mails

    mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version 2.0.30, there is an HTML injection vulnerability in plaintext e-mails generated by Mailgen. Projects are affected if the Mailgen.generatePlain…

    eladnava mailgen mailgen npm
  • Low 3.8
    CVE-2025-58009

    WordPress CP Multi View Event Calendar plugin <= 1.4.35 - Broken Access Control vulnerability

    Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.35.

    codepeople CP Multi View Event Calendar
  • Low 3.8
    CVE-2025-58012

    WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Mask: from n/a through <= 1.8.5.3.

    Alex Content Mask
  • Low —
    GHSA-mm7x-qfjj-5g2c

    Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal

    Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the `svg` or `math` tag is a…

    ammonia crates.io
  • Low 3.1
    CVE-2025-10778

    Smartstore Gift Voucher confirm race condition

    A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /checkout/confirm/ of the component Gift Voucher Handler. The manipulation leads to race condition. The attack may be initiated remotely. The att…

  • Low 3.7
    CVE-2025-10776

    LionCoders SalePro POS Login cleartext transmission

    A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. Th…

    LionCoders SalePro POS