Skip to content
OpenAdvisories

Archive

5 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /5 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-11308

    Vanderlande Baggage 360 messages cross site scripting

    A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. …

    Vanderlande Baggage 360
  • Low 2.4
    CVE-2025-11289

    westboy CicadasCMS Template Management TemplateFileServiceImpl.java save cross site scripting

    A vulnerability was determined in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. The impacted element is the function Save of the file src/main/java/com/zhiliao/common/template/TemplateFileServiceImpl.java of the component Template Managem…

    westboy CicadasCMS
  • Low 2.4
    CVE-2025-11283

    Frappe LMS Course cross site scripting

    A vulnerability was determined in Frappe LMS 2.35.0. This affects an unknown function of the component Course Handler. Executing manipulation of the argument Description can lead to cross site scripting. The attack can be executed remotely. The exploit has be…

    Frappe Technologies lms
  • Low 2.4
    CVE-2025-11282

    Frappe LMS Incomplete Fix CVE-2025-55006 cross site scripting

    A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Incomplete Fix CVE-2025-55006. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The ex…

    Frappe Technologies lms
  • Low 3.7
    CVE-2025-11280

    Frappe LMS Assignment Picture files direct request

    A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as hig…

    Frappe Technologies lms
  • Low 3.5
    CVE-2025-11276

    Rebuild Comment/Guestbook cross site scripting

    A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgra…

  • Low 3.3
    CVE-2025-11274

    Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources

    A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to lo…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu Alpine PyPI