Skip to content
OpenAdvisories

Archive

21 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /21 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.2
    CVE-2025-62641 Public exploit

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

    Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  • Critical 9.8
    CVE-2025-61757 Exploited Public exploit Scanner template EPSS 89%

    Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported vers…

    Oracle Identity Manager
    KEV Nov 21, 2025
  • Critical 9.8
    CVE-2025-53072 Public exploit

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

    Oracle Oracle Marketing
  • Low 2.7
    CVE-2025-53051 Public exploit

    Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected a…

    Oracle Oracle Database Server
  • High 8.1
    CVE-2025-62518 Public exploit

    astral-tokio-tar Vulnerable to PAX Header Desynchronization

    astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar hea…

    astral-sh tokio-tar wash pixi Debian Ubuntu Wolfi crates.io
  • High 7.2
    CVE-2025-60500 Public exploit

    QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypas…

  • High 7.5
    CVE-2025-60751 Public exploit

    GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

    geographiclib geographiclib Debian Ubuntu
  • Medium 5.1
    CVE-2025-56801 Public exploit

    The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB…

  • Medium 6.5
    CVE-2025-56799 Public exploit

    Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanis…

  • Medium 5.1
    CVE-2025-56800 Public exploit

    Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application imp…

  • Medium 5.1
    CVE-2025-56802 Public exploit

    The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration file…