Skip to content
OpenAdvisories

Archive

16 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /16 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.8
    CVE-2025-4802 Public exploit

    Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker …

    The GNU C Library glibc glibc glibc Debian Ubuntu Azure Linux
  • Medium 4.3
    CVE-2025-4476 Public exploit

    Libsoup: null pointer dereference in libsoup may lead to denial of service

    A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authentica…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2025-39507 Public exploit

    WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through < 6.4.4.

    NasaTheme Nasa Core
  • High 8.7
    CVE-2025-40629 Public exploit

    Path Traversal vulnerability in PNETLab

    PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitiv…

    PNETLab PNETLab
  • Medium 6.5
    CVE-2025-4679 Public exploit

    A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive i…

    Synology Active Backup for Microsoft 365
  • Medium 5.9
    CVE-2025-32407 Public exploit

    Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate …

  • Critical 10.0
    CVE-2025-47916 Public exploit Scanner template EPSS 84%

    Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The…

    invisioncommunity Invision Power Board