Skip to content
OpenAdvisories

Archive

13 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /13 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-11665

    D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection

    A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdater_main of the file rgbin of the component Firmware Update Handler. Performing manipulation results in os command injection. The attack may be initiated remotely. This…

    D-Link DAP-2695 Network devices
  • Medium 6.9
    CVE-2025-27258

    Ericsson Network Manager: escalation of privilege vulnerability

    Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege.

    Ericsson Ericsson Network Manager(ENM)
  • Medium 4.7
    CVE-2025-11664

    Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

    A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The…

    Campcodes Online Beauty Parlor Management System
  • Medium 6.8
    CVE-2025-9698

    The Plus Addons for Elementor < 6.3.16 - Author+ Stored XSS

    The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks.

    Web / CMS
  • Medium 4.7
    CVE-2025-11663

    Campcodes Online Beauty Parlor Management System manage-services.php sql injection

    A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-services.php. This manipulation of the argument sername causes sql injection. The attack can be initi…

    Campcodes Online Beauty Parlor Management System
  • Medium 4.3
    CVE-2025-31994

    HCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS)

    HCL Unica Campaign 12.1.10 is vulnerable to Reflected Cross-Site Scripting (XSS) where an attacker injects malicious script into an HTTP request, which is then reflected unsafely in the server's immediate response to the victim's browser, executing the script…

    HCL Software Unica Campaign
  • Medium 5.3
    CVE-2025-31996

    Unprotected files are impacting HCL Unica Platform

    HCL Unica Platform is affected by unprotected files due to improper access controls.  These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or user…

    HCL Software Unica Platform
  • Medium 4.7
    CVE-2025-11655

    Total.js Flow SVG File unrestricted upload

    A security flaw has been discovered in Total.js Flow up to 673ef9144dd25d4f4fd4fdfda5af27f230198924. The impacted element is an unknown function of the component SVG File Handler. Performing manipulation results in unrestricted upload. The attack can be initi…

    Total.js Flow