Skip to content
OpenAdvisories

Archive

27 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /27 April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-2878

    Kentico CMS Additional Database Installation Wizard install.aspx cross site scripting

    A vulnerability was found in Kentico CMS up to 13.0.178. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /CMSInstall/install.aspx of the component Additional Database Installation Wizard. The manipul…

    Kentico CMS
  • Low 3.3
    CVE-2025-2849

    UPX p_lx_elf.cpp un_DT_INIT heap-based overflow

    A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::un_DT_INIT of the file src/p_lx_elf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on …

    upx-ucl upx-ucl upx-doc Debian Ubuntu Wolfi
  • Low 3.7
    CVE-2024-9773

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

    An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could ha…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 2.7
    CVE-2025-31141

    In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page

    JetBrains TeamCity
  • Low 2.7
    CVE-2025-30877

    WordPress Quiz Cat plugin <= 3.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in fatcatapps Quiz Cat quiz-cat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz Cat: from n/a through <= 3.0.8.

    Fatcat Apps Quiz Cat
  • Low 3.1
    CVE-2024-55070

    A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 all…