Skip to content
OpenAdvisories

Archive

2 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /2 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2025-34079 Public exploit

    NSClient++ Authenticated Remote Code Execution via ExternalScripts API

    An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 844…

    NSClient++ NSClient++
  • High 7.3
    CVE-2025-34078 Public exploit

    NSClient++ 0.5.2.35 Local Privilege Escalation via ExternalScripts and Web Interface

    A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts features are enabled. The configuration file (nsclient.ini) stores the administrative password in plaintext and is readable by local users…

    NSClient++ NSClient++
  • Medium 6.1
    CVE-2025-34076 Public exploit

    Microweber CMS Authenticated Local File Inclusion via Backup API

    An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the backup management API. Authenticated users can abuse the /api/BackupV2/upload and /api/BackupV2/download endpoints to read arbitrary files fr…

    microweber CMS microweber/microweber Packagist
  • Critical 9.4
    CVE-2025-34074 Public exploit

    Lucee Admin Interface Authenticated Remote Code Execution via Scheduled Job File Write

    An authenticated remote code execution vulnerability exists in Lucee’s administrative interface due to insecure design in the scheduled task functionality. An administrator with access to /lucee/admin/web.cfm can configure a scheduled job to retrieve a remote…

    Lucee Association Switzerland Lucee
  • Critical 10.0
    CVE-2025-34073 Public exploit Scanner template

    stamparm/maltrail <=0.54 Remote Command Execution

    An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due t…

    stamparm maltrail
  • Critical 9.4
    CVE-2025-34071 Public exploit

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img files, which can be modi…

    GFI Software Kerio Control
  • Critical 9.5
    CVE-2025-34069 Public exploit

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to…

    GFI Software Kerio Control
  • High 8.1
    CVE-2025-4380 Public exploit Scanner template EPSS 43%

    Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion

    The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possi…

    scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager Web / CMS