Skip to content
OpenAdvisories

Archive

23 May 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.5

    Dnn.Platform's Site Import could use an external source with a crafted request

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.1…

  • Low 3.5

    User Interface (UI) Misrepresentation of Critical Information in GitLab

    A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs.

  • Low 2.9

    parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_Par…