Skip to content
OpenAdvisories

Archive

18 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /18 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.9
    CVE-2025-49590

    CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability

    CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Site Scripting (XSS), however this can be bypassed. There is an "early allow" code path that happens before the …

    cryptpad cryptpad
  • Low 2.7
    CVE-2025-1088

    Very long unicode dashboard title or panel name can hang the frontend

    In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go