Skip to content
OpenAdvisories

Archive

2 October 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-56381 Public exploit

    ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.report…

  • Medium 6.5
    CVE-2025-56380 Public exploit

    Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the fr…

  • Medium 5.4
    CVE-2025-56379 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to exec…

  • Medium 6.5
    CVE-2025-56019 Public exploit

    An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobi…