Skip to content
OpenAdvisories

Archive

9 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /9 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-2133

    ftcms edit cross site scripting

    A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/index.php/news/edit. The manipulation of the argument title leads to cross site scripting. The attack can be launch…

  • Low 2.4
    CVE-2025-2131

    dayrui XunRuiCMS Friendly Links cross site scripting

    A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friendly Links Handler. The manipulation of the argument Website Address leads to cross site scripting. Th…

    dayrui XunRuiCMS
  • Low 3.5
    CVE-2025-2130

    OpenXE Ticket Bearbeiten Page cross site scripting

    A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be ini…

  • Low 3.5
    CVE-2025-2124

    Control iD RH iD API change_password cross site scripting

    A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0. This affects an unknown part of the file /v2/customerdb/person.svc/change_password of the component API Handler. The manipulation of the argument message leads to c…

    Control iD RH iD
  • Low 3.5
    CVE-2025-2123

    GeSHi CSS cssgen.php get_var cross site scripting

    A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-…

    geshi geshi/geshi geshi Debian Ubuntu Packagist
  • Low 3.1
    CVE-2025-2122

    Thinkware Car Dashcam F800 Pro Connection denial of service

    A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this vulnerability is an unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack can o…

    Thinkware Car Dashcam F800 Pro
  • Low 2.1
    CVE-2025-2120

    Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk

    A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.conf of the component Configuration File Handler. The manipulation leads to clear…

    Thinkware Car Dashcam F800 Pro
  • Low 2.0
    CVE-2025-2119

    Thinkware Car Dashcam F800 Pro Device Registration default credentials

    A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is …

    Thinkware Car Dashcam F800 Pro
  • Low 3.5
    CVE-2025-1363

    easy-broken-link-checker <= 9.0.2 - Admin+ Stored XSS

    The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when …

    Web / CMS
  • Low 3.7
    CVE-2025-2114

    Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp improper authorization

    A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Pas…

    Shenzhen Sixun Software Sixun Shanghui Group Business Management System