Skip to content
OpenAdvisories

Archive

14 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /14 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-32421 Public exploit

    Next.js Race Condition to Cache Poisoning

    Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageP…

    vercel next.js next npm
  • Low 2.0
    CVE-2025-0138

    Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

    Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected…

    Palo Alto Networks Prisma Cloud Compute Edition Compute in Prisma Cloud Enterprise Edition Network devices
  • Low 2.0
    CVE-2025-0137

    PAN-OS: Improper Neutralization of Input in the Management Web Interface

    An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The atta…

    Palo Alto Networks PAN-OS Cloud NGFW Network devices
  • Low 2.7
    CVE-2025-0133 Public exploit Scanner template EPSS 46%

    PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal

    A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices