Skip to content
OpenAdvisories

Archive

March 2025

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-25618 Public exploit

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and …

  • Low 1.8
    CVE-2025-27893 Public exploit

    In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate imm…

  • Low 3.5
    CVE-2025-26865 Public exploit

    Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE

    Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which …