Skip to content
OpenAdvisories

Archive

1 April 2025

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-31864 Public exploit

    WordPress Beam me up Scotty – Back to Top Button plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Out the Box Beam me up Scotty beam-me-up-scotty allows Stored XSS.This issue affects Beam me up Scotty: from n/a through <= 1.0.23.

  • Medium 6.7
    CVE-2023-46988 Public exploit

    Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary fil…

  • Medium 5.4
    CVE-2025-26056 Public exploit

    A command injection vulnerability exists in the Infinxt iEdge 100 2.1.32 in the Troubleshoot module "MTR" functionality…

  • Medium 6.5
    CVE-2025-26055 Public exploit

    An OS Command Injection vulnerability exists in the Infinxt iEdge 100 2.1.32 Troubleshoot module, specifically in the t…

  • Medium 5.4
    CVE-2025-26054 Public exploit

    Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting (XSS) via the "Description" field during LAN configurati…

  • Medium 5.6
    CVE-2003-20001 Public exploit

    An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the log…