Skip to content
OpenAdvisories

Archive

20 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /20 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-3830

    kuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload

    A vulnerability was found in kuangstudy KuangSimpleBBS 1.0. It has been declared as critical. Affected by this vulnerability is the function fileUpload of the file src/main/java/com/kuang/controller/QuestionController.java. The manipulation of the argument ed…

    kuangstudy KuangSimpleBBS
  • Medium 6.1
    CVE-2020-36844

    The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT e…

    KnowBe4 Security Awareness Training
  • Medium 5.3
    CVE-2020-36845

    The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not valida…

    KnowBe4 Security Awareness Training
  • Medium 4.9
    CVE-2025-43954

    QMarkdown Cross-Site Scripting (XSS) vulnerability

    QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.

    @quasar QMarkdown @quasar/quasar-ui-qmarkdown npm
  • Medium 5.3
    CVE-2025-43921 Public exploit

    GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/c…

    GNU Mailman
  • Medium 4.1
    CVE-2025-43929 Public exploit

    open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that m…

    kitty project kitty kitty kitty Debian Ubuntu
  • Medium 5.4
    CVE-2025-43920 Public exploit

    GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated…

    GNU Mailman
  • Medium 5.8
    CVE-2025-43919 Public exploit

    GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ di…

    GNU Mailman
  • Medium 5.8
    CVE-2025-43928

    In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ..…

    Infodraw Media Relay Service