Skip to content
OpenAdvisories

Archive

1 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /1 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.6
    CVE-2025-66301 Public exploit

    Grav ihas Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

    Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to ch…

    getgrav grav getgrav/grav Packagist
  • High 8.7
    CVE-2025-66294 Public exploit

    Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass

    Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditio…

    getgrav grav getgrav/grav Packagist
  • Critical 9.0
    CVE-2025-3500 Public exploit

    Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

    Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3.

    Avast Antivirus
  • Medium 4.0
    CVE-2025-8045 Public exploit

    Mali GPU Kernel Driver allows improper GPU processing operations

    Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue af…

    Arm Valhall GPU Kernel Driver Arm 5th Gen GPU Architecture Kernel Driver
  • High 7.8
    CVE-2025-61228 Public exploit

    An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the softwa…

  • High 8.4
    CVE-2025-61229 Public exploit

    An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to e…

  • High 8.1
    CVE-2025-57489 Public exploit

    Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privil…