Skip to content
OpenAdvisories

Archive

28 June 2025

Vulnerabilities first published on this day (UTC), newest first.

46 results · Feed

  • Medium 5.4

    IBM Datacap clickjacking

    IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and po…

  • Medium 4.3

    IBM Datacap information disclosure

    IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cooki…

  • Medium 5.4

    IBM Datacap clickjacking

    IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click acti…

  • Medium 6.0

    akka-cluster-metrics uses Java serialization for cluster metrics

    In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.

  • Medium 5.0
    CVE-2025-53392 Public exploit

    In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_comm…

  • Critical 9.3

    The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit al…