Skip to content
OpenAdvisories

Archive

9 June 2025

Vulnerabilities first published on this day (UTC), newest first.

50 results · Clear filters · Feed

  • Medium 6.5

    Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

    A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leadi…

  • Medium 6.3

    PHPGurukul Nipah Virus Testing Management System test-details.php sql injection

    A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to s…

  • Medium 6.3

    PHPGurukul Nipah Virus Testing Management System patient-report.php sql injection

    A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is p…

  • Medium 6.3

    code-projects Patient Record Management System urinalysis_record.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /urinalysis_record.php. The manipulation of the argument itr_no leads to sql injection. The atta…

  • Medium 6.1

    A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b …

  • Medium 6.8

    An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Bi…

  • Medium 5.4
    CVE-2025-46041 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript…

  • Medium 6.1
    CVE-2025-46178 Public exploit

    Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project…

  • Medium 5.4

    Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenti…

  • Medium 5.4

    Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my pr…