Skip to content
OpenAdvisories

Archive

March 2025

Vulnerabilities first published in this month (UTC), newest first.

← February 2025 2025 / March April 2025 →
  1. 148
  2. 230
  3. 3349
  4. 4148
  5. 5141
  6. 6143
  7. 7113
  8. 840
  9. 924
  10. 1087
  11. 11333
  12. 12105
  13. 1391
  14. 1486
  15. 1544
  16. 1633
  17. 17134
  18. 1871
  19. 1986
  20. 20373
  21. 2166
  22. 2238
  23. 2341
  24. 24158
  25. 25137
  26. 26171
  27. 27377
  28. 28173
  29. 2910
  30. 3016
  31. 31373
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2747 Exploited Scanner template EPSS 97%

    Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

    An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This …

    Kentico Xperience
    KEV Oct 20, 2025
  • Critical 9.8
    CVE-2025-2746 Exploited Scanner template EPSS 74%

    Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

    An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects…

    Kentico Xperience
    KEV Oct 20, 2025
  • Critical 10.0
    CVE-2025-24201 Exploited Public exploit

    An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Alpine
    KEV Mar 13, 2025
  • Critical 10.0
    CVE-2024-54085 Exploited Public exploit EPSS 61%

    Redfish Authentication Bypass

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

    AMI MegaRAC-SPx
    KEV Jun 25, 2025
  • Critical 10.0
    CVE-2025-24813 Exploited Public exploit Scanner template EPSS 100%

    Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

    Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…

    Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
    KEV Apr 1, 2025
  • Critical 9.8
    CVE-2025-1316 Exploited EPSS 74%

    Edimax IC-7100 IP Camera OS Command Injection

    Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device

    Edimax IC-7100 IP Camera
    KEV Mar 19, 2025
  • Critical 9.3
    CVE-2025-22224 Exploited

    VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds …

    VMware Workstation ESXi Telco Cloud Platform Virtualization
    KEV Mar 4, 2025