Skip to content
OpenAdvisories

Archive

8 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /8 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-29972 Public exploit

    Azure Storage Resource Provider Spoofing Vulnerability

    Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.

    Microsoft Azure Storage Resource Provider (SRP)
  • High 8.7
    CVE-2024-6648 Public exploit

    Path Traversal in AP Page Builder

    Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.

    Apollo Theme AP Page Builder
  • High 8.2
    CVE-2025-41450 Public exploit

    Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

    Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2

    Danfoss AK-SM 8xxA Series
  • High 7.5
    CVE-2025-3419 Public exploit

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

    The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxy_image() function. This makes it possible for unauthenticated attackers to…

    Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) Web / CMS
  • Medium 6.1
    CVE-2025-28074 Public exploit

    phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vul…

  • Medium 6.1
    CVE-2025-28073 Public exploit

    phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker…

  • Medium 5.3
    CVE-2025-32873 Public exploit EPSS 14%

    Django has a denial-of-service possibility in strip_tags()

    An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a potential denial-of-service (slow performance) when processing inputs containing large sequences of inc…

    djangoproject Django python-django django Debian Ubuntu Alpine PyPI