Skip to content
OpenAdvisories

Archive

10 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /10 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-62158

    Frappe had attachments made by students to their assignments of type Text set to public

    Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded fi…

    Frappe Technologies lms
  • Low 2.7
    CVE-2025-61921

    Sinatra has ReDoS vulnerability in ETag header value generation

    Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsing component of Sinatra, if the `etag` method is used when co…

    sinatra sinatra gitlab-cng-18.2 sinatra Debian Ubuntu Wolfi RubyGems
  • Low 3.7
    CVE-2025-52625

    HCL AION is susceptible to Cacheable SSL Page Found vulnerability

    A vulnerability  Cacheable SSL Page Found vulnerability has been identified in HCL AION.  Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0.

    HCL Software AION
  • Low 3.7
    CVE-2025-52635

    HCL AION is susceptible to Trusted types in scripts not enforced in CSP

    A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.

    HCL Software AION
  • Low 3.7
    CVE-2025-52630

    HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0.

    HCL Software AION
  • Low 3.7
    CVE-2025-52634

    HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.

    HCL Software HCL AION
  • Low 3.1
    CVE-2025-52655

    HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

    Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.

    HCL Software HCL MyXalytics
  • Low 2.4
    CVE-2025-21046

    Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to te…

    Samsung Mobile Samsung Mobile Devices