Skip to content
OpenAdvisories

Archive

29 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /29 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-43400 Public exploit

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.8
    CVE-2025-41244 Exploited Public exploit EPSS 16%

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation Debian Ubuntu Azure Linux
    KEV Oct 30, 2025
  • High 8.1
    CVE-2025-57483 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary…

  • Medium 6.5
    CVE-2025-57428 Public exploit

    Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gai…

  • High 7.5
    CVE-2025-51495 Public exploit

    An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially c…

    swupdate swupdate Debian Ubuntu
  • Critical 9.0
    CVE-2025-56795 Public exploit

    Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsan…

  • Medium 6.1
    CVE-2025-56807 Public exploit

    A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administra…

  • Medium 5.3
    CVE-2025-56764 Public exploit

    Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning…