Skip to content
OpenAdvisories

Archive

23 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /23 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.2
    CVE-2025-10184 Public exploit

    OnePlus OxygenOS Telephony provider permission bypass

    The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data is being accessed. Thi…

    OnePlus OxygenOS
  • Critical 9.8
    CVE-2025-10147 Public exploit

    Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated atta…

    eteubert Podlove Podcast Publisher Web / CMS
  • Critical 9.8
    CVE-2025-26399 Exploited · Ransomware Public exploit Scanner template EPSS 91%

    SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability

    SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of C…

    SolarWinds Web Help Desk
    KEV Mar 9, 2026
  • High 7.5
    CVE-2025-55780 Public exploit

    A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malfo…

    mupdf mupdf Debian Ubuntu
  • Medium 6.5
    CVE-2025-56311 Public exploit

    In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware v2.2.14), the web management interface contains an authenti…