Skip to content
OpenAdvisories

Archive

17 June 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-49071 Public exploit

    WordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen: from n/a through < 1.5.1.

  • Critical 9.1
    CVE-2025-4404 Public exploit

    Freeipa: idm: privilege escalation from host to domain admin in freeipa

    A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonic…

  • Critical 9.3
    CVE-2025-5777 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    KEV Jul 10, 2025