Skip to content
OpenAdvisories

Archive

9 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /9 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.3
    CVE-2025-11555 Public exploit

    Campcodes Online Learning Management System calendar_of_events.php sql injection

    A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The manipulation of the argument date_start results in sql injection. The attack may be launched remotely.…

    Campcodes Online Learning Management System
  • Medium 6.3
    CVE-2025-11554 Public exploit

    Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions

    A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10. Affected by this issue is some unknown functionality of the file app/Http/Controllers/AccessLevelController.php of the component User Type Handler. The manipulation leads to insec…

    Portabilis i-Educar
  • Medium 5.5
    CVE-2025-4615 Public exploit

    PAN-OS: Improper Neutralization of Input in the Management Web Interface

    An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issu…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 7.5
    CVE-2025-11371 Exploited Public exploit Scanner template EPSS 92%

    Gladinet CentreStack and TrioFox Local File Inclusion Flaw

    In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This…

    Gladinet CentreStack and TrioFox
    KEV Nov 4, 2025
  • High 7.3
    CVE-2025-60375 Public exploit

    The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficien…