Skip to content
OpenAdvisories

Archive

5 May 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.3
    CVE-2025-46731 Public exploit

    Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI

    Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CH…

  • High 7.3
    CVE-2025-4255 Public exploit

    PCMan FTP Server RMD Command buffer overflow

    A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been…

  • High 8.1
    CVE-2025-28062 Public exploit

    A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allo…