Skip to content
OpenAdvisories

Archive

17 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /17 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-2397

    China Mobile P22g-CIac Telnet Service improper authorization

    A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been declared as problematic. This vulnerability affects unknown code of the component Telnet Service. The manipulation lea…

    China Mobile P22g-CIac ZXWT-MIG-P8G8V GT3200-8G8P
  • Low 2.1
    CVE-2025-27512

    Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods

    Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system user to use the actions `org.projectatomic.rpmostree1.deploy` to deploy updates to the system and `org.projectatomic.rpmostree1.finalize-dep…

    coreos zincati zincati crates.io
  • Low 3.3
    CVE-2025-1398

    macOS TCC Bypass via Code Injection

    Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.

    Mattermost Mattermost mattermost-desktop npm
  • Low 3.6
    CVE-2019-17659

    A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attac…

    Fortinet FortiSIEM Network devices
  • Low 3.5
    CVE-2025-2377

    SourceCodester Vehicle Management System confirmbooking.php cross site scripting

    A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /confirmbooking.php. The manipulation of the argument id leads to cross site scripting. T…

    SourceCodester Vehicle Management System
  • Low 3.5
    CVE-2025-2375

    PHPGurukul Human Metapneumovirus Testing Management System Admin Profile Page profile.php cross site scripting

    A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /profile.php of the component Admin Profile Page. The manipulation of the argument e…

    PHPGurukul Human Metapneumovirus Testing Management System
  • Low 3.5
    CVE-2025-2371

    PHPGurukul Human Metapneumovirus Testing Management System Registered Mobile Number Search registered-user-testing.php cross site scripting

    A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /registered-user-testing.php of the component Registered Mobile Num…

    PHPGurukul Human Metapneumovirus Testing Management System
  • Low 2.4
    CVE-2025-2366

    gougucms Add Department Page add cross site scripting

    A vulnerability, which was classified as problematic, was found in gougucms 4.08.18. This affects the function add of the file /admin/department/add of the component Add Department Page. The manipulation of the argument title leads to cross site scripting. It…

  • Low 3.5
    CVE-2025-2364

    lenve VBlog ArticleService.java addNewArticle cross site scripting

    A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/…

    lenve VBlog
  • Low 3.7
    CVE-2025-2356

    BlackVue App API deviceDelete get request method with sensitive query strings

    A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is poss…

    BlackVue App
  • Low 3.3
    CVE-2025-2355

    BlackVue App API Endpoint credentials storage

    A vulnerability was found in BlackVue App 3.65 on Android and classified as problematic. Affected by this issue is some unknown functionality of the component API Endpoint Handler. The manipulation of the argument BCS_TOKEN/SECRET_KEY leads to unprotected sto…

    BlackVue App
  • Low 3.2
    CVE-2025-29431

    Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/depart…

  • Low 3.3
    CVE-2025-25618 Public exploit

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and …