Archive

5 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /5 April 2025 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.9

CVE-2025-27515 Public exploit

Laravel has a File Validation Bypass

Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.

laravel framework laravel/framework php-laravel-framework Debian Packagist

Mar 5, 2025
Medium 5.3

CVE-2024-8682 Public exploit

JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration

The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 11.6.6. This is due to the plugin not properly validate if the user can register option is enable…

https://themeforest.net/item/jnews-one-stop-solution-for-web-publishing/20566392 JNews - WordPress Newspaper Magazine Blog AMP Theme Web / CMS

Mar 5, 2025
Medium 5.4

CVE-2024-48246 Public exploit

Vehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the "Name" parameter of /ve…

Mar 5, 2025