Skip to content
OpenAdvisories

Archive

13 May 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-43564 Public exploit EPSS 17%

    ColdFusion | Incorrect Authorization (CWE-863)

    ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data …

  • Critical 9.6
    CVE-2025-32756 Exploited Public exploit EPSS 31%

    A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiC…

    KEV May 14, 2025
  • Critical 9.8
    CVE-2025-4632 Exploited Public exploit Scanner template EPSS 24%

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before …

    KEV May 22, 2025
  • Critical 10.0
    CVE-2024-46506 Public exploit Scanner template EPSS 63%

    NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because fu…