Skip to content
OpenAdvisories

Archive

20 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /20 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-5010

    moonlightL hexo-boot Blog Backend index.html cross site scripting

    A vulnerability classified as problematic has been found in moonlightL hexo-boot 4.3.0. This affects an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the argument Description leads to cross site scripting. …

    moonlightL hexo-boot
  • Low 3.5
    CVE-2025-5007

    Part-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting

    A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The …

  • Low 3.3
    CVE-2025-5001

    GNU PSPP pspp-convert.c calloc integer overflow

    A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Loca…

    GNU PSPP pspp pspp Debian Ubuntu
  • Low 2.4
    CVE-2025-4996

    Intelbras RF 301K Add Static IP cross site scripting

    A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Add Static IP. The manipulation of the argument Description leads to cross site scripting. The attack …

    Intelbras RF 301K
  • Low 3.7
    CVE-2025-48015

    Observable Response Discrepancy

    Failed login response could be different depending on whether the username was local or central.

    Schweitzer Engineering Laboratories SEL-5056 Software-Defined Network Flow Controller
  • Low 3.8
    CVE-2025-47938

    TYPO3 Vulnerable to Unverified Password Change for Backend Users

    TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, the backend user management interface allows password changes without requ…

    TYPO3 typo3 typo3/cms-core typo3/cms-setup Web / CMS Packagist
  • Low 3.7
    CVE-2025-47937

    TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling

    TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, when performing a database query involving multiple tables through the dat…

    TYPO3 typo3 typo3/cms-core Web / CMS Packagist
  • Low 3.3
    CVE-2025-47936

    TYPO3 Vulnerable to Server Side Request Forgery via Webhooks

    TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, Webhooks are inherently vulnerable to Cross-Site Request Forgery (CSRF), which can be exploited by a…

    TYPO3 typo3 typo3/cms-webhooks Web / CMS Packagist