Skip to content
OpenAdvisories

Archive

October 2025

Vulnerabilities first published in this month (UTC), newest first.

← September 2025 2025 / October November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 6.0
    CVE-2025-46818 Public exploit Scanner template

    Redis: Authenticated users can execute LUA scripts as a different user

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 6.4
    CVE-2025-9876 Public exploit

    Ird Slider <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This ma…

    inforrada Ird Slider Web / CMS
  • Medium 4.7
    CVE-2025-55971 Public exploit

    TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to…

  • Medium 6.5
    CVE-2025-56381 Public exploit

    ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.report…

  • Medium 6.5
    CVE-2025-56380 Public exploit

    Frappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the fr…

  • Medium 5.4
    CVE-2025-56379 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to exec…

  • Medium 6.5
    CVE-2025-56019 Public exploit

    An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobi…

  • Medium 5.4
    CVE-2025-57389 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 al…

  • Medium 4.6
    CVE-2025-56514 Public exploit

    Fiora chat user avatar is vulnerable to XSS via SVG files

    Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users.

    fiora npm