Skip to content
OpenAdvisories

Archive

16 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /16 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-32433 Exploited Public exploit EPSS 99%

    Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

    Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoc…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux Alpine
    KEV Jun 9, 2025
  • Critical 9.8
    CVE-2025-31200 Exploited Public exploit EPSS 21%

    A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Apr 17, 2025
  • Medium 5.5
    CVE-2025-23134 Public exploit

    ALSA: timer: Don't take register_mutex with copy_from/to_user()

    In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_from/to_user() The infamous mmap_lock taken in copy_from/to_user() can be often problematic when it's called inside another mutex, as they mig…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.6
    CVE-2025-39538 Public exploit

    WordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through <= 3.3.9.4.

    Mathieu Chartier WP-Advanced-Search
  • Critical 9.6
    CVE-2025-39601 Public exploit

    WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1.

    WPFactory Custom CSS, JS & PHP
  • Medium 5.4
    CVE-2025-26153 Public exploit

    A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious…