Skip to content
OpenAdvisories

Archive

5 June 2025

Vulnerabilities first published on this day (UTC), newest first.

47 results · Clear filters · Feed

  • Medium 6.3

    code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection

    A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete lea…

  • Medium 6.3

    code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection

    A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument c…

  • Medium 5.3

    Deno vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

    ### Summary Static imports are exempted from the network permission check. An attacker could exploit this to leak the password file on the network. ### Details Static imports in Deno are exempted from the network permission check. This can be exploited by att…

  • Medium 6.3

    code-projects Patient Record Management System sputum_form.php sql injection

    A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /sputum_form.php. The manipulation of the argument itr_no leads to sql injection. Th…

  • Medium 4.0

    Django Improper Output Neutralization for Logs vulnerability

    An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to lo…

  • Medium 4.6
    CVE-2025-47827 Exploited Public exploit

    In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptograp…

    KEV Oct 14, 2025
  • Medium 5.8

    aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the …