Skip to content
OpenAdvisories

Archive

22 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /22 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32965 Public exploit

    Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2

    xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser. Versions 4.2.1, 4.2.2, 4.2.3, and 4.2.4 of xrpl.js were compromised and contained malicious code designed to exfiltrate private keys. Version 2.14.2 is also…

    XRPLF xrpl.js xrpl npm
  • Critical 9.3
    CVE-2025-34028 Exploited Public exploit Scanner template EPSS 98%

    Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

    The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Executi…

    Commvault Command Center Innovation Release
    KEV May 2, 2025
  • High 8.1
    CVE-2025-2594 Public exploit

    User Registration & Membership < 4.1.3 - Authentication Bypass

    The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target accou…

    Web / CMS
  • High 8.8
    CVE-2025-3616 Public exploit

    Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload

    The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authentica…

    wpsoul Greenshift – animation and page builder blocks Web / CMS
  • High 7.8
    CVE-2025-1731 Public exploit

    An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware…

    Zyxel USG FLEX H series uOS firmware Network devices
  • Medium 4.3
    CVE-2025-3855 Public exploit

    CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection

    A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/team_members/save_profile_image/ of the component Profile Picture Handler. T…

    CodeCanyon RISE Ultimate Project Manager
  • High 7.3
    CVE-2024-40445 Public exploit

    A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read…

  • Medium 6.1
    CVE-2025-26159 Public exploit

    Laravel Starter Cross Site Scripting (XSS)

    Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field.

    nasirkhan/laravel-starter Packagist