Skip to content
OpenAdvisories

Archive

16 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /16 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.1
    CVE-2025-22233

    Spring Framework DataBinder Case Sensitive Match Exception

    CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Produ…

    Spring Spring Framework thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Low 2.6
    CVE-2025-47794

    Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission

    Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 29.0.13, 30.0.7, and 31.0.1 and Nextcloud Enterprise Server prior to 26.0.13.13, 27.1.11.13, 28.0.14.4, 29.0.13, 30.0.7, and 31.0.1, an attacker on a multi-user system may r…

    Nextcloud security-advisories
  • Low 2.0
    CVE-2025-40632

    Cross-site scripting (XSS) vulnerability in IceWarp Mail Server

    Cross-site scripting (XSS) in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered.

    IceWarp Icewarp Mail Server
  • Low 2.0
    CVE-2025-40631

    HTTP host header injection vulnerability in IceWarp Mail Server

    HTTP host header injection vulnerability in Icewarp Mail Server affecting version 11.4.0. By modifying the Host header and adding a payload, arbitrary JavaScript code can be executed on page load. The user must interact with a malicious link to be redirected.

    IceWarp Icewarp Mail Server
  • Low 3.5
    CVE-2025-4745

    code-projects Employee Record System current_employees.php cross site scripting

    A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file current_employees.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads t…

    code-projects Employee Record System
  • Low 3.5
    CVE-2025-4744

    code-projects Employee Record System edit_employee.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\edit_employee.php. The manipulation of the argument employeed_id/first…

    code-projects Employee Record System
  • Low 2.9
    CVE-2025-48188

    libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnuli…

    GNU PSPP pspp pspp Debian Ubuntu