Skip to content
OpenAdvisories

Archive

April 2025

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.6
    CVE-2024-45712 Public exploit

    SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

    SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.

  • Low 3.5
    CVE-2025-3568 Public exploit

    Webkul Krayin CRM SVG File edit cross site scripting

    A vulnerability has been found in Webkul Krayin CRM up to 2.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/settings/users/edit/ of the component SVG File Handler. The manipulation leads to cros…