Skip to content
OpenAdvisories

Archive

27 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /27 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-11081

    GNU Binutils objdump.c dump_dwarf_section out-of-bounds

    A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now publ…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Low 2.4
    CVE-2025-11069

    westboy CicadasCMS Add Department save cross site scripting

    A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack…

    westboy CicadasCMS
  • Low 2.4
    CVE-2025-11068

    westboy CicadasCMS save cross site scripting

    A vulnerability was found in westboy CicadasCMS 1.0. Affected by this vulnerability is an unknown functionality of the file /system/cms/category/save. The manipulation of the argument categoryName results in cross site scripting. The attack can be executed re…

    westboy CicadasCMS
  • Low 2.4
    CVE-2025-11067

    Projectworlds Visitor Management System Add Visitor myform.php cross site scripting

    A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /myform.php of the component Add Visitor Page. The manipulation of the argument Name leads to cross site scripting. Remote exploitation …

    Project Worlds Visitor Management System
  • Low 3.3
    CVE-2025-36144

    IBM watsonx.data information disclosure

    IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local user.

    IBM watsonx.data