Skip to content
OpenAdvisories

Archive

13 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /13 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-62360 Public exploit

    WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`

    WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_documento.php endpoint, specifically in the id_dependente parameter…

    LabRedesCefetRJ WeGIA
  • Critical 9.1
    CVE-2025-37729

    Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine

    Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted string where Jinjava variab…

    Elastic Elastic Cloud Enterprise (ECE)
  • Critical 9.8
    CVE-2025-6919

    SQLi in Cats Informatics' Aykome

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking…

    Cats Information Technology Software Development Technologies Aykome License Tracking System
  • Critical 9.0
    CVE-2025-9976

    OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

    An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.

    Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform
  • Critical 10.0
    CVE-2025-9265

    API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products

    A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 …

    Kiloview NDI