Skip to content
OpenAdvisories

Archive

11 June 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.2
    CVE-2025-6002 Public exploit

    VirtueMart - Unrestricted File Upload

    An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to remote code execution …

  • Critical 9.3
    CVE-2025-32711 Public exploit

    M365 Copilot Information Disclosure Vulnerability

    Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

  • High 7.8
    CVE-2025-4275 Public exploit

    SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate

    A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed …

  • High 8.2
    CVE-2025-49091 Public exploit

    KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme…