Skip to content
OpenAdvisories

Archive

13 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /13 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Low 3.8
    CVE-2024-31150

    Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable inf…

  • Low 3.5
    CVE-2025-23233

    Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allo…

    Browsers
  • Low 3.5
    CVE-2025-22848

    Improper conditions check for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authentica…

    Browsers
  • Low 3.5
    CVE-2025-20084

    Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an au…

    Browsers
  • Low 3.5
    CVE-2025-20057

    Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an au…

    Browsers
  • Low 2.6
    CVE-2025-20030

    Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge…

    Browsers
  • Low 2.3
    CVE-2025-47280

    Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow

    Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email mes…

    umbraco Umbraco.Forms.Issues Umbraco.Forms UmbracoForms NuGet
  • Low 1.8
    CVE-2025-47278

    Flask uses fallback key instead of current signing key

    Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the …

    pallets flask airflow-3 emissary Debian Azure Linux Wolfi PyPI
  • Low 2.3
    CVE-2025-30207

    Kirby vulnerable to path traversal in the router for PHP's built-in server

    Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other ser…

    getkirby kirby getkirby/cms Packagist
  • Low 3.3
    CVE-2024-12533

    Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data…

    Phoenix SecureCore Technology 4
  • Low 2.3
    CVE-2024-35281

    An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, versio…

    Fortinet FortiClientMac FortiVoiceUCDesktop Network devices
  • Low 2.2
    CVE-2025-40571

    A vulnerability has been identified in Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC S…

    Siemens Mendix OIDC SSO V4.2 (Mendix 10 compatible) Mendix OIDC SSO (Mendix 9 compatible) Mendix OIDC SSO V4.3 (Mendix 10 compatible) ICS / OT
  • Low 3.0
    CVE-2025-22246

    CVE-2025-22246 – UAA Private Key Exposure

    Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.

    Cloud Foundry CF Deployment UAA