Skip to content
OpenAdvisories

Archive

23 May 2025

Vulnerabilities first published on this day (UTC), newest first.

47 results · Clear filters · Feed

  • Medium 4.0
    CVE-2025-48708 Public exploit

    gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for…

  • Medium 6.9

    An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, a…

  • Medium 5.4

    openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.

  • Medium 4.6

    A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.…

  • Medium 4.3

    A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_23…

  • Medium 6.5

    Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remote…

  • Medium 6.1

    A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allow…