Skip to content
OpenAdvisories

Archive

21 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /21 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-2590

    code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting

    A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross sit…

    code-projects Human Resource Management System
  • Low 3.3
    CVE-2025-2588

    Hercules Augeas fa.c re_case_expand null pointer dereference

    A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a …

    Hercules Augeas augeas augeas Debian Ubuntu Azure Linux
  • Low 3.3
    CVE-2025-27715

    Auto-Enrollment of Team Admins into Private Channels without explicit consent

    Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them.

    Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  • Low 3.5
    CVE-2025-2583

    SimpleMachines SMF ManageNews.php cross site scripting

    A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting. It is possible to initiate t…

    SimpleMachines SMF
  • Low 3.5
    CVE-2025-2582

    SimpleMachines SMF ManageAttachments.php cross site scripting

    A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file ManageAttachments.php. The manipulation of the argument Notice leads to cross site scripting. The attack may …

    SimpleMachines SMF
  • Low 3.0
    CVE-2025-30343

    A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to OpenSlides meetings and…

    Intevation OpenSlides
  • Low 3.5
    CVE-2025-30345

    An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group.create action, the user …

    Intevation OpenSlides