Skip to content
OpenAdvisories

Archive

3 March 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.8
    CVE-2025-0288 Public exploit

    CVE-2025-0288

    Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel …

  • Medium 6.9
    CVE-2025-1868 Public exploit

    Information display on multiple products from Famatech Corp

    Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vu…

  • High 7.5
    CVE-2024-53027 Public exploit

    Buffer Copy Without Checking Size of Input in WLAN Host

    Transient DOS may occur while processing the country IE.

  • Medium 5.1
    CVE-2023-49031 Public exploit

    Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a r…

  • Critical 9.0
    CVE-2025-27590 Public exploit EPSS 28%

    Oxidized Web RANCID migration page allows unauthenticated user to gain control over Linux user account

    In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.

  • Medium 6.8
    CVE-2025-25967 Public exploit

    Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authe…

  • Critical 9.0
    CVE-2025-26206 Public exploit

    Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges …