Skip to content
OpenAdvisories

Archive

2 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /2 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-61605

    WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint

    WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profile_pet.php endpoint, specifically in the id_pet parameter. This vulnerability a…

    LabRedesCefetRJ WeGIA
  • Critical 9.4
    CVE-2025-61603

    WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter

    WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to ex…

    LabRedesCefetRJ WeGIA
  • Critical 9.4
    CVE-2025-34210

    Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) in cleartext files that are wo…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.3
    CVE-2025-59743

    Multiple vulnerabilities in AndSoft's e-TMS

    SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie i…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59742

    Multiple vulnerabilities in AndSoft's e-TMS

    SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'USRMAIL' parameter …

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59741

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59740

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59739

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59738

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59737

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59736

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-59735

    Multiple vulnerabilities in AndSoft's e-TMS

    Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm'…

    AndSoft e-TMS
  • Critical 9.3
    CVE-2025-41064

    Incorrect authentication in GTT´s group OpenSIAC

    Incorrect authentication vulnerability in OpenSIAC, which could allow an attacker to impersonate a person using Cl@ve as an authentication method.

    GTT OpenSIAC
  • Critical 9.8
    CVE-2025-9697

    Ajax WooSearch <= 1.0.0 - Unauthenticated SQL Injection

    The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

    Web / CMS
  • Critical 9.8
    CVE-2025-59407

    The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falc…

  • Critical 9.8
    CVE-2025-59403

    The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for Android lacks authentica…