Skip to content
OpenAdvisories

Archive

31 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /31 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-12547

    LogicalDOC Community Edition Admin Login login.jsp excessive authentication

    A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts.…

    LogicalDOC Community Edition
  • Low 3.5
    CVE-2025-12546

    LogicalDOC Community Edition API Key creation UI cross site scripting

    A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1. This affects an unknown part of the component API Key creation UI. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been p…

    LogicalDOC Community Edition
  • Low 1.8
    CVE-2025-6075

    Quadratic complexity in os.path.expandvars() with user-controlled template

    If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi
  • Low 3.7
    CVE-2025-36249

    IBM Jazz for Service Management is vulnerable to "filter" cookie not sent over SSL

    IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the us…

    IBM Jazz for Service Management
  • Low 2.7
    CVE-2025-64352

    WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <…

    WPDeveloper Essential Addons for Elementor
  • Low 3.8
    CVE-2025-64350

    WordPress Rank Math SEO plugin <= 1.0.252.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO: from n/a through <= 1.0.252.1.

    Rank Math SEO Rank Math SEO
  • Low 3.1
    CVE-2025-23050

    QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (…

    Qt Project Qt qtconnectivity-opensource-src qt6-connectivity Debian Ubuntu Azure Linux