Skip to content
OpenAdvisories

Archive

19 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /19 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.5
    CVE-2025-11947

    bftpd Configuration File options.c expand_groups heap-based overflow

    A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack o…

  • Medium 4.7
    CVE-2025-11944

    givanz Vvveb Raw SQL import.php import sql injection

    A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The ex…

    givanz Vvveb
  • Medium 5.4
    CVE-2025-11941

    e107 CMS Avatar image.php path traversal

    A vulnerability was detected in e107 CMS up to 2.3.3. This impacts an unknown function of the file /e107_admin/image.php?mode=main&action=avatar of the component Avatar Handler. Performing manipulation of the argument multiaction[] results in path traversal. …

    e107 CMS
  • Medium 4.7
    CVE-2025-11939

    ChurchCRM Backup Restore RestoreJob.php path traversal

    A vulnerability was determined in ChurchCRM up to 5.18.0. This issue affects some unknown processing of the file src/ChurchCRM/Backup/RestoreJob.php of the component Backup Restore Handler. Executing a manipulation of the argument restoreFile can lead to path…

  • Medium 5.6
    CVE-2025-11938

    ChurchCRM setup.php deserialization

    A vulnerability was found in ChurchCRM up to 5.18.0. This vulnerability affects unknown code of the file setup/routes/setup.php. Performing a manipulation of the argument DB_PASSWORD/ROOT_PATH/URL results in deserialization. The attack may be initiated remote…

  • Medium 5.3
    CVE-2025-62672

    rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecifi…

    boyns rplay rplay rplay Debian Ubuntu