Skip to content
OpenAdvisories

Archive

30 October 2025

Vulnerabilities first published on this day (UTC), newest first.

88 results · Clear filters · Feed

  • Medium 5.4

    A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is lo…

  • Medium 6.1

    A stored cross-site scripting (XSS) vulnerability in AIxBlock commit 04f305 allows attackers to execute arbitrary web s…

  • Medium 6.1

    An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to e…

  • Medium 6.5

    PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAtta…

  • Medium 6.5

    Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When p…

  • Medium 6.1

    Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Revolution 4.1 and earlier allows remote unauthenticated a…

  • Medium 6.1

    Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated att…

  • Medium 6.1

    A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through …