Skip to content
OpenAdvisories

Archive

March 2025

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-24201 Exploited Public exploit

    An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…

    KEV Mar 13, 2025
  • Critical 10.0
    CVE-2024-54085 Exploited Public exploit EPSS 61%

    Redfish Authentication Bypass

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

    KEV Jun 25, 2025
  • Critical 10.0
    CVE-2025-24813 Exploited Public exploit Scanner template EPSS 100%

    Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

    Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…

    KEV Apr 1, 2025
  • Critical 9.3
    CVE-2025-22224 Exploited Public exploit

    VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds …

    KEV Mar 4, 2025