Skip to content
OpenAdvisories

Archive

27 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /27 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-53533 Public exploit Scanner template

    Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting (XSS) via a malformed…

    pi-hole web
  • High 7.5
    CVE-2025-55752 Public exploit EPSS 64%

    Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

    Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the UR…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  • High 8.7
    CVE-2025-41067 Public exploit

    Reachable Assertion vulnerability in Open5GS

    Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders th…

    NewPlane open5GS
  • High 8.8
    CVE-2023-49440 Public exploit

    AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."

  • High 7.6
    CVE-2025-60424 Public exploit

    A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to by…

  • Medium 6.2
    CVE-2025-60791 Public exploit

    Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application le…

  • High 8.6
    CVE-2025-60425 Public exploit

    Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authenticat…