Skip to content
OpenAdvisories

Archive

21 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /21 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-2987

    IBM Maximo Asset Management server-side request forgery

    IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

    IBM Maximo Asset Management
  • Low 3.3
    CVE-2025-3841

    wix-incubator jam Jinja2 Template jam.py special elements used in a template engine

    A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This affects an unknown part of the file jam.py of the component Jinja2 Template Handler. The manipulation of the argument con…

    wix-incubator jam
  • Low 2.3
    CVE-2025-2517

    Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager

    Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.

    OpenText ArcSight Enterprise Security Manager
  • Low 2.1
    CVE-2025-3840

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of …

    Saviynt OVA based Connect
  • Low 3.8
    CVE-2025-25228

    Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla

    A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area in backend.

    virtuemart.net Virtuemart component for Joomla Web / CMS
  • Low 2.5
    CVE-2025-32408

    In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled.

    Soffid IAM
  • Low 3.4
    CVE-2025-43916

    Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing us…

    Sonos api.sonos.com