Skip to content
OpenAdvisories

Archive

9 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /9 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-2132

    ftcms Search ajax_all_lists sql injection

    A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajax_all_lists of the component Search. The manipulation of the argument name leads to sql injection. It is possible to launch…

  • Medium 5.6
    CVE-2025-2129 Scanner template

    Mage AI insecure default initialization of resource

    A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attac…

  • Medium 4.3
    CVE-2025-2127 Scanner template

    JoomlaUX JUX Real Estate realties cross site scripting

    A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argu…

    JoomlaUX JUX Real Estate
  • Medium 6.3
    CVE-2025-2126 Public exploit EPSS 11%

    JoomlaUX JUX Real Estate GET Parameter realties sql injection

    A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter…

    JoomlaUX JUX Real Estate
  • Medium 4.3
    CVE-2025-2125

    Control iD RH iD PDF Document companyId resource injection

    A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovante_marcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the arg…

    Control iD RH iD
  • Medium 5.6
    CVE-2025-27636 Public exploit EPSS 97%

    Apache Camel: Camel Message Header Injection via Improper Filtering

    Bypass/Injection vulnerability in Apache Camel components under particular conditions. This issue affects Apache Camel: from 4.10.0 through <= 4.10.1, from 4.8.0 through <= 4.8.4, from 3.10.0 through <= 3.22.3. Users are recommended to upgrade to version 4.10…

    Apache Software Foundation Apache Camel org.apache.camel:camel-support Maven
  • Medium 6.3
    CVE-2025-2121

    Thinkware Car Dashcam F800 Pro File Storage access control

    A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the l…

    Thinkware Car Dashcam F800 Pro
  • Medium 6.3
    CVE-2025-2117

    Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System reportCenter.do electricDocList sql injection

    A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by this issue is the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulat…

    Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System
  • Medium 4.3
    CVE-2025-2116

    Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System File Protocol imageProxy.do server-side request forgery

    A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do…

    Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System
  • Medium 6.1
    CVE-2025-1382

    Contact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRF

    The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

    Web / CMS
  • Medium 4.3
    CVE-2025-1362

    easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

    The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSR…

    Web / CMS
  • Medium 6.3
    CVE-2025-2115

    zzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted upload

    A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is p…

    zzskzy Warehouse Refinement Management System