Skip to content
OpenAdvisories

Archive

September 2025

Vulnerabilities first published in this month (UTC), newest first.

← August 2025 2025 / September October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-23339 Public exploit

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based b…

    NVIDIA NVIDIA CUDA Toolkit nvidia-cuda-toolkit nvidia-cuda-toolkit Debian Ubuntu
  • Low 3.7
    CVE-2025-59376 Public exploit

    mcp-kubernetes-server has a Command Injection vulnerability

    feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a w…

    feiskyer mcp-kubernetes-server mcp-kubernetes-server PyPI
  • Low 3.5
    CVE-2025-10370 Public exploit

    MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

    A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the file /htdocs/userScripts.php. The manipulation of the argument Custom script leads to cross site scripting. The attack is possible to be ca…

    MiczFlor RPi-Jukebox-RFID
  • Low 3.8
    CVE-2025-8889 Public exploit

    Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload

    The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

    Web / CMS
  • Low 3.7
    CVE-2025-51586 Public exploit Scanner template

    Presta Shop vulnerable to email enumeration

    An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.

    prestashop/prestashop Packagist