Skip to content
OpenAdvisories

Archive

5 June 2025

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Low 2.4

    code-projects Traffic Offense Reporting System Setting save-settings.php cross site scripting

    A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument site_name lea…

  • Low 3.5

    code-projects Traffic Offense Reporting System saveuser.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument user_id/username/email/name/posit…

  • Low 2.5

    Radare2 radiff2 pal.c r_cons_pal_init memory corruption

    A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has…

  • Low 2.5

    Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption

    A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The a…

  • Low 2.5

    Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption

    A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption…

  • Low 2.5

    Radare2 radiff2 pal.c r_cons_pal_init memory corruption

    A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking loc…

  • Low 2.5

    Radare2 radiff2 cons.c r_cons_flush use after free

    A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. …

  • Low 2.5

    Radare2 radiff2 cons.c cons_stack_load memory corruption

    A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An …

  • Low 2.5

    Radare2 radiff2 pal.c r_cons_pal_init memory corruption

    A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locall…

  • Low 2.5

    Radare2 radiff2 cons.c r_cons_is_breaked memory corruption

    A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is po…

  • Low 3.3
    CVE-2025-5640 Public exploit

    PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow

    A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handle_message_trajectory_representation_waypoints of the file mavlink_receiver.cpp of the component TRAJECTORY_REPRESENTATION…

  • Low 3.5

    SourceCodester Food Menu Manager Add Menu index.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functionality of the file /index.php of the component Add Menu Handler. The manipulation of the argument name/…

  • Low —

    anon-vec lacks sufficient checks in public API

    The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - `AnonVec::get_ref()` - `AnonVec::get_mut()` - `AnonVec::remove_get()` The crate was built as a learning project and is not being maintained.