Skip to content
OpenAdvisories

Archive

19 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /19 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2025-27415 Public exploit

    Nuxt allows DOS via cache poisoning with payload rendering response

    Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possib…

    nuxt nuxt nuxt npm
  • Medium 6.5
    CVE-2025-30144 Public exploit

    Fast-JWT Improperly Validates iss Claims

    fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 5.0.6, the fast-jwt library does not properly validate the iss claim based on the RFC 7519. The iss (issuer) claim validation within the fast-jwt library permits an array of strings as a val…

    nearform fast-jwt fast-jwt npm
  • Critical 9.8
    CVE-2025-2512 Public exploit

    File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function

    The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated …

    Thom Stark File Away Web / CMS
  • Medium 5.3
    CVE-2024-50629 Public exploit EPSS 35%

    Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.…

    Synology DiskStation Manager (DSM) BeeStation OS (BSM)
  • Critical 9.8
    CVE-2024-10441 Public exploit

    Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) befor…

    Synology DiskStation Manager (DSM) BeeStation OS (BSM)