Archive

11 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /11 April 2025 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.8

CVE-2025-27591 Public exploit

Below has Incorrect Permission Assignment for Critical Resource

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that…

Meta Platforms below below crates.io

Mar 11, 2025
Medium 6.5

CVE-2025-24071 Public exploit EPSS 23%

Microsoft Windows File Explorer Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 11, 2025
Medium 6.5

CVE-2025-24054 Exploited Public exploit EPSS 62%

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 11, 2025
KEV Apr 17, 2025
Medium 6.5

CVE-2021-37787 Public exploit

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnera…

Mar 11, 2025
Medium 5.4

CVE-2025-25747 Public exploit

Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and …

hoteldruid hoteldruid Debian Ubuntu

Mar 11, 2025