Skip to content
OpenAdvisories

Archive

14 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /14 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-24797 Public exploit

    Meshtastic incorrectly hands malformed packets leads to controlled buffer overflow

    Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remot…

    meshtastic firmware
  • Low 3.5
    CVE-2025-3568 Public exploit

    Webkul Krayin CRM SVG File edit cross site scripting

    A vulnerability has been found in Webkul Krayin CRM up to 2.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/settings/users/edit/ of the component SVG File Handler. The manipulation leads to cros…

    Webkul Krayin CRM
  • High 8.1
    CVE-2025-2563 Public exploit Scanner template EPSS 49%

    User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation

    The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges

    Web / CMS