Skip to content
OpenAdvisories

Archive

29 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /29 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-59163

    vet MCP Server SSE Transport DNS Rebinding Vulnerability

    vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers whe…

    safedep vet github.com/safedep/vet Go
  • Low 3.4
    CVE-2025-35032

    Medical Informatics Engineering Enterprise Health arbitrary file upload

    Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

    Medical Informatics Engineering Enterprise Health
  • Low 3.3
    CVE-2025-35031

    Medical Informatics Engineering Enterprise Health includes session token in debug output

    Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of …

    Medical Informatics Engineering Enterprise Health
  • Low 3.5
    CVE-2025-11137

    Gstarsoft GstarCAD File Renaming cross site scripting

    A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File Renaming Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to …

    Gstarsoft GstarCAD
  • Low 2.4
    CVE-2025-11134

    Cudy TR1200 Wireless Settings config cross site scripting

    A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the file /cgi-bin/luci/admin/network/wireless/config/ of the component Wireless Settings Page. Such manipulation of the argument SSID leads to…

    Cudy TR1200
  • Low 3.5
    CVE-2025-55795

    The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership …