Archive

28 March 2025

Vulnerabilities first published on this day (UTC), newest first.

← February 2025 2025 / March /28 April 2025 →

All Critical High Medium Low Exploited only Public exploit

84 results · Clear filters · Feed

Medium 6.3

CVE-2025-28092

ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.

shopxo/shopxo Packagist

Mar 28, 2025
Medium 5.5

CVE-2025-28097

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.

Mar 28, 2025
Medium 6.5

CVE-2025-28094

ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.

shopxo/shopxo Packagist

Mar 28, 2025
Medium 4.0

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAM…

Shibboleth OpenSAML C++ library opensaml opensaml2 Debian Ubuntu

Mar 28, 2025