Skip to content
OpenAdvisories

Archive

9 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /9 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-4470

    SourceCodester Online Student Clearance System add-student.php cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross …

    SourceCodester Online Student Clearance System
  • Low 2.4
    CVE-2025-4469

    SourceCodester Online Student Clearance System add-admin.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2…

    SourceCodester Online Student Clearance System
  • Low 2.4
    CVE-2025-4461

    TOTOLINK N150RT Virtual Server Page cross site scripting

    A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exp…

    Toto Link N150RT
  • Low 2.4
    CVE-2025-4460

    TOTOLINK N150RT URL Filtering Page cross site scripting

    A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the component URL Filtering Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The …

    Toto Link N150RT
  • Low 2.9
    CVE-2025-47736

    libsql-sqlite3-parser crash due to invalid UTF-8 input

    dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

    gwenn libsql-sqlite3-parser pnpm-12 libsql-sqlite3-parser Wolfi crates.io
  • Low 2.9
    CVE-2025-47737

    trailer mishandles allocating with a size of zero

    lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.

    Geal trailer trailer crates.io
  • Low 2.9
    CVE-2025-47735

    wgp race condition in inner::drop

    inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.

    Nugine wgp wgp crates.io