Skip to content
OpenAdvisories

Archive

17 October 2025

Vulnerabilities first published on this day (UTC), newest first.

44 results · Clear filters · Feed

  • Medium 5.5

    radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

  • Medium 5.5

    radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.

  • Medium 6.5

    FlowiseAI Pre-Auth Arbitrary Code Execution

    Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

  • Medium 5.4

    CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting (XSS) in its ch…