Skip to content
OpenAdvisories

Archive

23 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /23 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-59546

    DNN Vulnerable to Stored XSS Using Backend Admin Credentials

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, administrators and content editors can set html in module titles that could include javascript which could be used for XSS b…

    dnnsoftware Dnn.Platform DotNetNuke.Core NuGet
  • Low 3.3
    CVE-2025-0672

    Authentication Bypass in Multiple WSO2 Products via Stale FIDO Credential Association

    An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled. When a user account is deleted, the system does not automatically remove associated FIDO registration data. If a new user account is later created usi…

    WSO2 WSO2 Identity Server WSO2 Identity Server as Key Manager WSO2 Open Banking IAM
  • Low 3.7
    CVE-2017-20200

    Coinomi cleartext transmission

    A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. This attack is characterized by high complexity…

  • Low 3.5
    CVE-2025-8282

    SureForms < 1.9.1 - Admin+ Stored XSS

    The SureForms WordPress plugin before 1.9.1 does not sanitise and escape some parameters when outputing them in the page, which could allow admin and above users to perform Cross-Site Scripting attacks.

    Web / CMS
  • Low 3.5
    CVE-2025-10837

    code-projects Simple Food Ordering System order.php cross site scripting

    A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The …

    code-projects Simple Food Ordering System