Skip to content
OpenAdvisories

Archive

3 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /3 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-31486 Public exploit Scanner template EPSS 40%

    Vite allows server.fs.deny to be bypassed with .svg or relative paths

    Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest: script header, the server.fs.deny restriction was able to bypass. This bypass is only…

    vitejs vite vite npm
  • Critical 9.0
    CVE-2025-22457 Exploited · Ransomware Public exploit EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Apr 4, 2025
  • Medium 6.5
    CVE-2025-31800 Public exploit

    WordPress Publitio plugin <= 2.2.0 - Arbitrary File Read vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in publitio Publitio publitio allows Path Traversal.This issue affects Publitio: from n/a through <= 2.2.0.

    publitio Publitio
  • Critical 9.9
    CVE-2025-2945 Public exploit EPSS 56%

    pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

    Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules). The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, wher…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Critical 9.8
    CVE-2025-31161 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unl…

    CrushFTP CrushFTP
    KEV Apr 7, 2025
  • Critical 9.0
    CVE-2025-30406 Exploited Public exploit Scanner template EPSS 95%

    Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to th…

    Gladinet CentreStack
    KEV Apr 8, 2025