Skip to content
OpenAdvisories

Archive

27 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /27 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.6
    CVE-2025-2826

    n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets.

    n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets. Thi…

    Arista Networks EOS Network devices
  • Low 2.7
    CVE-2025-48370

    auth-js Vulnerable to Insecure Path Routing from Malformed User Input

    auth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.70.0, the library functions getUserById, deleteUser, updateUserById, listFactors and deleteFactor did not require the user supplied values to be valid UUIDs. This could lead to …

    supabase auth-js @supabase/auth-js npm
  • Low 2.1
    CVE-2025-2236

    Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external se…

    OpenText Advanced Authentication
  • Low 1.2
    CVE-2025-48382

    Fess has Insecure Temporary File Permissions

    Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fess.helper.SystemHelper creates temporary files without explicitly setting restrictive permissions. This could lead to potential information …

    codelibs Fess org.codelibs.fess:fess Maven
  • Low 3.7
    CVE-2025-26211

    Gibbon before 29.0.00 allows CSRF.

    GibbonEdu Gibbon