Skip to content
OpenAdvisories

Archive

8 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /8 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-61913 EPSS 14%

    Flowise is vulnerable to arbitrary file read, arbitrary file write

    Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to …

    FlowiseAI Flowise flowise flowise-components npm
  • Critical 9.3
    CVE-2017-20202

    Web Developer for Chrome v0.4.9 Malicious Backdoor Supply Chain Compromise

    Web Developer for Chrome v0.4.9 contained malicious code that generated a domain via a DGA and fetched a remote script. The fetched script conditionally loaded follow-on modules that performed extensive ad substitution and malvertising, displayed fake “repair…

    Web Developer for Chrome Web Developer for Chrome Browsers
  • Critical 9.3
    CVE-2017-20201

    CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise

    CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 (32-bit builds) contained a malicious pre-entry-point loader that diverts execution from __scrt_common_main_seh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable h…

    Piriform CCleaner CCleaner Cloud
  • Critical 9.3
    CVE-2025-10353 Public exploit Scanner template

    Missing Authorization vulnerability in Melis Platform

    File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveD…

    Melis Technology Melis Platform melisplatform/melis-cms-slider Packagist
  • Critical 9.3
    CVE-2025-10352 Public exploit

    Missing Authorization vulnerability in Melis Platform

    Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

    Melis Technology Melis Platform melisplatform/melis-core Packagist
  • Critical 9.3
    CVE-2025-10351 Public exploit

    SQL injection vulnerability in Melis Platform

    SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/g…

    Melis Technology Melis Platform melisplatform/melis-cms Packagist
  • Critical 9.8
    CVE-2025-10587

    Community Events <= 1.5.1 - Unauthenticated SQL Injection

    The Community Events plugin for WordPress is vulnerable to SQL Injection via the event_category parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin…

    jackdewey Community Events Web / CMS
  • Critical 9.8
    CVE-2025-11423

    Tenda CH22 SafeEmailFilter formSafeEmailFilter memory corruption

    A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely.…

    Tenda CH22
  • Critical 9.8
    CVE-2025-11418

    Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow

    A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-b…

    Tenda CH22