Skip to content
OpenAdvisories

Archive

18 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /18 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-24801 Public exploit EPSS 21%

    GLPI allows authenticated remote code execution

    GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18.

    GLPI glpi glpi Ubuntu
  • High 7.5
    CVE-2025-24799 Public exploit Scanner template EPSS 87%

    GLPI allows unauthenticated SQL injection through the inventory endpoint

    GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18.

    GLPI glpi glpi Ubuntu
  • High 8.1
    CVE-2024-44313 Public exploit

    TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

    TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.

    tastyigniter/tastyigniter Packagist