Skip to content
OpenAdvisories

Archive

21 October 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.2
    CVE-2025-62641 Public exploit

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  • High 8.1
    CVE-2025-62518 Public exploit

    astral-tokio-tar Vulnerable to PAX Header Desynchronization

    astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar hea…

  • High 7.2
    CVE-2025-60500 Public exploit

    QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypas…

  • High 7.5
    CVE-2025-60751 Public exploit

    GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.