Skip to content
OpenAdvisories

Archive

8 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /8 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-46812

    Trix vulnerable to Cross-site Scripting on copy & paste

    Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary Java…

    basecamp trix trix npm
  • Low 3.7
    CVE-2025-46712

    Erlang/OTP SSH Has Strict KEX Violations

    Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux Alpine
  • Low 2.8
    CVE-2025-44021

    OpenStack Ironic fails to restrict paths used for file:// image URLs

    OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor)…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI
  • Low 1.9
    CVE-2025-47729 Exploited

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signa…

    TeleMessage archiving backend
    KEV May 12, 2025