Skip to content
OpenAdvisories

Archive

15 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /15 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-11832 Public exploit

    APIs Lack Rate Limiting

    Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC2 BLU-IC4
  • High 8.5
    CVE-2025-10576 Public exploit

    Sound Research SECOMNService Escalation of Privilege

    Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilitie…

    HP Sound Research
  • Medium 5.5
    CVE-2025-9548 Public exploit

    A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow …

    Lenovo Power Management driver
  • Medium 4.6
    CVE-2025-60013 Public exploit

    F5OS-A FIPS HSM password vulnerability

    When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. …

    F5 F5OS - Appliance Network devices
  • Critical 9.8
    CVE-2025-10294 Public exploit

    OwnID Passwordless Login <= 1.3.4 - Authentication Bypass

    The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via …

    victornavarro OwnID Passwordless Login Web / CMS
  • Critical 9.8
    CVE-2025-9967 Public exploit

    Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover

    The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. T…

    gsayed786 Orion SMS OTP Verification. Web / CMS
  • High 7.5
    CVE-2025-11177 Public exploit

    External Login <= 1.11.2 - Unauthenticated SQL Injection via log

    The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, and including, 1.11.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…

    tbenyon External Login Web / CMS
  • Critical 9.8
    CVE-2025-10041 Public exploit

    Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

    The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers t…

    ajitdas Flex QR Code Generator Web / CMS
  • Medium 6.8
    CVE-2025-31702 Public exploit

    A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user cre…

    Dahua IPC SD