Skip to content
OpenAdvisories

Archive

28 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /28 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-31650 Public exploit EPSS 61%

    Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

    Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOf…

    Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • High 7.3
    CVE-2025-4028 Public exploit

    PHPGurukul COVID19 Testing Management System profile.php sql injection

    A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql inje…

    PHPGurukul COVID19 Testing Management System
  • High 7.3
    CVE-2025-22235 Public exploit

    Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

    EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: * You use Spring Securit…

    Spring Spring Boot libspring-java keycloak-config-cli Ubuntu Wolfi Maven