Skip to content
OpenAdvisories

Archive

21 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /21 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-29927 Public exploit Scanner template EPSS 99%

    Authorization Bypass in Next.js Middleware

    Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check…

    vercel next.js jitsucom-jitsu-console next Wolfi npm
  • Medium 5.5
    CVE-2025-2598 Public exploit

    AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

    When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this iss…

    AWS Cloud Development Kit Command Line Interface aws-cdk cdk npm
  • High 7.2
    CVE-2025-30349 Public exploit EPSS 31%

    Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account tak…

    horde imp php-horde-imp php-horde Debian Ubuntu