Skip to content
OpenAdvisories

Archive

7 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /7 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.6
    CVE-2025-10162 Public exploit Scanner template

    OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read

    The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthenticated users (before version 15.0) and any authenticated user such as a Subs…

    Web / CMS
  • High 7.8
    CVE-2025-50505 Public exploit

    Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-service) by default …

  • Critical 9.9
    CVE-2025-44823 Public exploit EPSS 17%

    Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nag…

    Nagios Log Server
  • Critical 9.8
    CVE-2025-52021 Public exploit

    A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0…

  • Medium 6.1
    CVE-2025-56243 Public exploit

    A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethReddyHC Event Management System…