Skip to content
OpenAdvisories

Archive

13 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /13 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-62178

    WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'

    WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /html/atendido/cadastro_atendido_parentesco_pessoa_nova.php endpoint of …

    LabRedesCefetRJ WeGIA
  • Low 3.5
    CVE-2025-62174

    Mastodon allows continued access after password reset via CLI

    Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, when an administrator resets a user account's password via the command-line interface using `bin/tootctl accounts modify --reset-password…

    mastodon mastodon
  • Low —
    GHSA-6fgx-x7m2-74qm

    tracexec has `env` command argument injection via environment variables starting with dash in traced exec events

    ### Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause…

    tracexec crates.io
  • Low 3.5
    CVE-2025-58084

    Mattermost Desktop App crashes when clicking on malformed external URL

    Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.

    Mattermost Mattermost
  • Low 2.4
    CVE-2025-27259

    Ericsson Network Manager: improper neutralization of user controlled input

    Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.

    Ericsson Ericsson Network Manager(ENM)
  • Low 3.5
    CVE-2025-31995

    HCL Unica MaxAI Workbench is vulnerable to improper input validation

    HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc.

    HCL Software MaxAI Workbench