Skip to content
OpenAdvisories

Archive

30 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /30 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-10725 Public exploit

    Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin

    A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows …

    Red Hat opendatahub-io Red Hat OpenShift AI 2.16 Red Hat OpenShift AI 2.24
  • Critical 9.8
    CVE-2025-8625 Public exploit

    Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

    The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file ty…

    copypressdev Copypress Rest API Web / CMS
  • Critical 9.3
    CVE-2025-61584 Public exploit

    serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

    serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifical…

    serverless-dns serverless-dns
  • Critical 9.8
    CVE-2025-56513 Public exploit

    NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An …

  • High 7.3
    CVE-2025-56132 Public exploit Scanner template

    LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The appl…