Skip to content
OpenAdvisories

Archive

1 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /1 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-61588

    risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`

    RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sys_read, the host is able to use a crafted response to writ…

    risc0 risc0 risc0-zkvm risc0-zkvm-platform crates.io
  • Critical 9.2
    CVE-2025-59951

    Termix' official Docker image contains an authentication bypass vulnerability

    Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The official Docker image for Termix versions 1.5.0 and below, due to being configured with an Nginx reverse proxy, causes the backend to retrieve th…

    LukeGus Termix
  • Critical 9.8
    CVE-2023-53517

    tipc: do not update mtu if msg_max is too small in mtu negotiation

    In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, w…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2025-61622 EPSS 49%

    Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory

    Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sour…

    Apache Software Foundation Apache Fory pyfory pyfury PyPI
  • Critical 9.1
    CVE-2020-36852

    Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Database Wiping

    The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazale_sds_delete_entries_table_r…

    ghazale Custom Searchable Data Entry System Web / CMS