Skip to content
OpenAdvisories

Archive

6 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /6 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-61769

    Emlog vulnerable to stored XSS in file upload functionality in emlog

    Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authe…

    emlog emlog
  • Low 2.4
    CVE-2025-11333

    langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

    A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customer_add_action.php of the component Add Customer Page. The manipulation of the argument First…

    langleyfcu Online Banking System
  • Low 3.5
    CVE-2025-11332

    CmsEasy URL view.php cross site scripting

    A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHP_SELF can lead to cross site scripting. The attack may be launche…

  • Low 2.7
    CVE-2025-58589

    Information Disclosure Through Stacktrace

    When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the appl…

    SICK Tire Analytics Logistic Diagnostic Analytics Baggage Analytics
  • Low 3.8
    CVE-2025-58578

    Unlimited user creation by authorized users

    A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation.

    SICK Enterprise Analytics
  • Low 3.7
    CVE-2025-11322

    Mangati NovoSGA User Creation new weak password

    A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.users/new of the component User Creation Page. Executing manipulation of the argument Senha/Confirmação da senha can lead to weak password …

    Mangati NovoSGA novosga/novosga Packagist
  • Low 2.2
    CVE-2025-59447

    The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can le…

    YoSmart YoLink Smart Hub
  • Low 3.5
    CVE-2025-59451

    The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes.

    YoSmart YoLink application
  • Low 3.6
    CVE-2025-61985

    ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a Pro…

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine
  • Low 3.6
    CVE-2025-61984 Public exploit

    ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted source…

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine