Skip to content
OpenAdvisories

Archive

24 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /24 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.0
    CVE-2025-5129

    Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path

    A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required…

    Sangfor 零信任访问控制系统 aTrust
  • High 7.3
    CVE-2025-5128

    ScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection

    A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injec…

    ScriptAndTools Real-Estate-website-in-PHP
  • High 8.8
    CVE-2025-5126

    Teledyne FLIR AX8 settingsregional.php setDataTime command injection

    A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in comma…

    Teledyne FLIR AX8
  • High 8.1
    CVE-2025-5124

    Sony SNC-M1 Administrative Interface default credentials

    A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default …

    Sony SNC-RZ25N SNC-DS10 SNC-RX570N
  • High 8.1
    CVE-2025-4336 Public exploit

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()

    The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated att…

    eMagicOne eMagicOne Store Manager for WooCommerce Web / CMS