Skip to content
OpenAdvisories

Archive

14 May 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-32421 Public exploit

    Next.js Race Condition to Cache Poisoning

    Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageP…

  • Low 2.7
    CVE-2025-0133 Public exploit Scanner template EPSS 46%

    PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal

    A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they …

  • Medium 4.3
    CVE-2025-4664 Public exploit

    Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cr…

  • High 7.5
    CVE-2025-47445 Public exploit Scanner template

    WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

    Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.