Skip to content
OpenAdvisories

Archive

16 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /16 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2025-62506 Public exploit

    MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

    MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS (Security Token Service) accounts with restricted session policies to bypass their i…

    minio minio minio minio-iamguarded-2025-compat Wolfi Go
  • Critical 9.6
    CVE-2025-11492 Public exploit

    HTTP Configuration and Encryption in Transit

    In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the enc…

    ConnectWise Automate
  • Critical 9.1
    CVE-2025-61922 Public exploit

    PrestaShop Checkout allows customer account takeover via email

    PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via em…

    PrestaShopCorp ps_checkout prestashop/ps_checkout Packagist
  • High 8.2
    CVE-2025-22381 Public exploit

    Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to res…