Skip to content
OpenAdvisories

Archive

14 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /14 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-29775 Public exploit EPSS 10%

    xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

    xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto …

    node-saml xml-crypto sqlpad sqlpad-compat Wolfi npm
  • Critical 9.3
    CVE-2025-29774 Public exploit

    xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References

    xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto …

    node-saml xml-crypto sqlpad sqlpad-compat Wolfi npm
  • Critical 9.4
    CVE-2025-2304 Public exploit

    Camaleon CMS Privilege Escalation

    A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows a…

    owen2345 Camaleon CMS camaleon_cms RubyGems
  • Critical 9.8
    CVE-2025-29384 Public exploit

    In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerabilit…