Skip to content
OpenAdvisories

Archive

21 June 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.3

    Stored XSS in Psono-Client via Malicious Vault Entry URLs

    A Cross-Site Scripting (XSS) vulnerability has been identified in Psono-Client’s handling of vault entries of type website_password and bookmark, as used in Bitdefender SecurePass. The client does not properly sanitize the URL field in these entries. As a res…

  • Critical 9.3

    rfc3161-client has insufficient verification for timestamp response signatures

    rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR…

  • Critical 9.8
    CVE-2025-6216 EPSS 48%

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The sp…