Skip to content
OpenAdvisories

Archive

30 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /30 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2025-8850

    Insecure API Design in danny-avila/librechat

    In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vul…

    danny-avila danny-avila/librechat
  • Low 2.1
    CVE-2025-12517

    Credits Page not Matching Versions in Use in the Firmware

    Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

    Azure Access Technology BLU-IC2 BLU-IC4
  • Low 3.5
    CVE-2025-10636

    NS Maintenance Mode for WP <= 1.3.1 - Admin+ Stored XSS

    The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is di…

    Web / CMS