Skip to content
OpenAdvisories

Archive

24 May 2025

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Low 3.7

    Tmall Demo Payment Identifier pay random values

    A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505. This affects an unknown part of the file /tmall/order/pay/ of the component Payment Identifier Handler. The manipulation leads to insufficiently random values. It is…

  • Low 2.4

    Tmall Demo Product Details Page admin cross site scripting

    A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505. Affected by this issue is some unknown functionality of the file /tmall/admin/ of the component Product Details Page. The manipulation of the argument Product N…

  • Low 3.5

    Tmall Demo Buy Item Page cross site scripting

    A vulnerability classified as problematic was found in Tmall Demo up to 20250505. Affected by this vulnerability is an unknown functionality of the component Buy Item Page. The manipulation of the argument Detailed Address leads to cross site scripting. The a…

  • Low 3.5

    Teledyne FLIR AX8 prod.php cross site scripting

    A vulnerability was determined in Teledyne FLIR AX8 up to 1.46.16. This issue affects some unknown processing of the file /prod.php. Executing manipulation of the argument cmd can lead to cross site scripting. The attack may be launched remotely. The exploit …

  • Low 2.9

    SCSIR has a Potential Unsound Issue in WriteSameCommand

    In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.

  • Low 2.9

    In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock.

  • Low 2.9

    In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).

  • Low 2.9

    Process Sync has a Potential Unsound Issue in SharedMutex

    In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked.

  • Low 2.9

    memory_pages division by zero

    In the memory_pages crate 0.1.0 for Rust, division by zero can occur.

  • Low 2.9

    process_lock has a Potential Unsound issue in unlock

    The process_lock crate 0.1.0 for Rust allows data races in unlock.