Skip to content
OpenAdvisories

Archive

16 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /16 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-2352

    StarSea99 starsea-mall Backend save cross site scripting

    A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/indexConfigs/save of the component Backend. The manipulation of the argument categoryName leads t…

    StarSea99 starsea-mall
  • Low 3.1
    CVE-2025-2349

    IROAD Dash Cam FX2 Password Hash passwd weak password hash

    A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the component Password Hash Handler. The manipulation leads to password …

    IROAD Dash Cam FX2
  • Low 3.1
    CVE-2025-2341

    IROAD Dash Cam X5 SSID default credentials

    A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within th…

    IROAD Dash Cam X5
  • Low 2.4
    CVE-2025-2340

    otale Tale Blog Site Settings save saveOptions cross site scripting

    A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross s…

    otale Tale Blog
  • Low 3.5
    CVE-2025-1624

    GDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSS

    The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disall…

    Web / CMS
  • Low 3.5
    CVE-2025-1623

    GDPR Cookie Compliance < 4.15.9 - Admin+ Stored XSS

    The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disall…

    Web / CMS
  • Low 3.5
    CVE-2025-1622

    GDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSS

    The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disall…

    Web / CMS
  • Low 3.5
    CVE-2025-2335

    Drivin Soluções API registerSchool cross site scripting

    A vulnerability classified as problematic was found in Drivin Soluções up to 20250226. This vulnerability affects unknown code of the file /api/school/registerSchool of the component API Handler. The manipulation of the argument message leads to cross site sc…

    Drivin Soluções