Skip to content
OpenAdvisories

Archive

3 February 2025

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-36437 Public exploit

    The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any inst…

  • Medium 5.4
    CVE-2024-57175 Public exploit

    A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0…

  • Medium 6.4
    CVE-2024-57522 Public exploit

    SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An a…

  • High 8.8
    CVE-2024-56901 Public exploit

    A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less th…

  • High 8.8
    CVE-2024-56898 Public exploit

    Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low …

  • High 7.5
    CVE-2024-56902 Public exploit EPSS 27%

    Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which…

  • High 8.8
    CVE-2025-25064 Public exploit EPSS 37%

    SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 1…

  • Medium 4.4
    CVE-2025-25062 Public exploit

    An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isol…