Skip to content
OpenAdvisories

Archive

7 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /7 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-27603

    XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations

    XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. …

    xwikisas application-confluence-migrator-pro com.xwiki.confluencepro:application-confluence-migrator-pro-ui Web / CMS Maven
  • Critical 9.3
    CVE-2025-27519 Public exploit

    Cognita Arbitrary File Write

    Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is s…

    truefoundry cognita
  • Critical 9.8
    CVE-2024-12876

    Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change

    The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating the…

    uxper Golo - City Travel Guide WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-1315

    InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

    The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it poss…

    sfwebservice InWave Jobs Web / CMS
  • Critical 9.8
    CVE-2025-1475

    WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'

    The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5. This is due to insufficient verification on the 'user_phone' parameter when logging in. This makes it possible for unauthenticated attack…

    whyun WPCOM Member Web / CMS
  • Critical 9.8
    CVE-2024-42733

    An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script…

  • Critical 9.8
    CVE-2025-27816

    A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploit…