Skip to content
OpenAdvisories

Archive

17 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /17 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34282 Public exploit

    ThingsBoard < v4.2.1 SVG Image SSRF

    ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way th…

    ThingsBoard ThingsBoard
  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2025-56221 Public exploit

    A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a bru…

  • Critical 9.8
    CVE-2025-56218 Public exploit

    An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a …