Skip to content
OpenAdvisories

Archive

25 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /25 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-32432 Exploited Public exploit Scanner template EPSS 100%

    Craft CMS Allows Remote Code Execution

    Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. …

    craftcms cms craftcms/cms Packagist
    KEV Mar 20, 2026
  • High 7.5
    CVE-2025-32044 Public exploit

    Moodle: unauthenticated rest api user data exposure

    A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with z…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 8.2
    CVE-2025-43865 Public exploit

    React Router allows pre-render data spoofing on React-Router framework mode

    React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object …

    remix-run react-router react-router npm
  • High 7.5
    CVE-2025-43864 Public exploit EPSS 20%

    React Router allows a DoS via cache poisoning by forcing SPA mode

    React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes a…

    remix-run react-router react-router npm