Skip to content
OpenAdvisories

Archive

11 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /11 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-4551

    ContiNew Admin file cross site scripting

    A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the …

  • Low 2.4
    CVE-2025-4547

    SourceCodester Web-based Pharmacy Product Management System Add User Page cross site scripting

    A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting…

    SourceCodester Web-based Pharmacy Product Management System
  • Low 3.1
    CVE-2025-4542

    Freeebird Hotel 酒店管理系统 API SessionInterceptor.java cross-domain policy

    A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统 API up to 1.2. Affected by this issue is some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. The manipulation lead…

    Freeebird Hotel 酒店管理系统 API
  • Low 3.1
    CVE-2025-4537

    yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie

    A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation l…

    yangzongzhuan RuoYi-Vue
  • Low 3.7
    CVE-2025-4534

    SunGrow Logger1000 weak password

    A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attac…

    Sungrow Logger1000
  • Low 2.7
    CVE-2025-4533

    JeecgBoot Document Library Upload zip unzipFile resource consumption

    A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument F…

  • Low 3.7
    CVE-2025-4527

    Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security

    A security flaw has been discovered in Dígitro NGC Explorer up to 3.48.21. The impacted element is an unknown function of the component Password Transmission Handler. Performing a manipulation results in client-side enforcement of server-side security. The at…

    Dígitro NGC Explorer