Skip to content
OpenAdvisories

Archive

19 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /19 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2025-4971 Public exploit

    Broadcom Automic Automation Agent Unix privilege escalation

    Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges.

    Broadcom Automic Automation
  • Critical 10.0
    CVE-2025-39401 Public exploit

    WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).

    mojoomla WPAMS
  • High 7.3
    CVE-2025-39459 Public exploit

    WordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2.

    contempoinc Real Estate 7
  • Critical 10.0
    CVE-2025-47577 Public exploit Scanner template

    WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.9.2.

    templateinvaders TI WooCommerce Wishlist Web / CMS
  • Critical 9.9
    CVE-2025-26892 Public exploit

    WordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura allows Using Malicious Files.This issue affects Celestial Aura: from n/a through 2.2.

    dkszone Celestial Aura
  • Medium 6.5
    CVE-2025-23167 Public exploit

    A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the require…

    Node.js node nodejs nodejs18 Debian Azure Linux Wolfi
  • Medium 4.8
    CVE-2025-44108 Public exploit

    A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via th…