Skip to content
OpenAdvisories

Archive

10 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /10 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-2135 Public exploit

    Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corr…

    Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi
  • Medium 5.5
    CVE-2025-27136 Public exploit

    LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

    LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity (XXE) injection. When processing the CreateBucketConfiguration XML document duri…

    Robothy local-s3 io.github.robothy:local-s3-rest Maven
  • Critical 10.0
    CVE-2025-24813 Exploited Public exploit Scanner template EPSS 100%

    Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

    Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…

    Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
    KEV Apr 1, 2025
  • Low 3.5
    CVE-2025-26865 Public exploit

    Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE

    Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which …

    Apache Software Foundation Apache OFBiz
  • High 8.8
    CVE-2025-25614 Public exploit

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the per…

  • Medium 5.4
    CVE-2025-25620 Public exploit

    Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.

  • High 7.6
    CVE-2025-25616 Public exploit

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The af…

  • Medium 6.0
    CVE-2025-25615 Public exploit

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class secti…