Skip to content
OpenAdvisories

Archive

2 July 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 3.8

    The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited dur…

  • Low 3.8

    Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrato…

  • Low 3.7

    Stored XSS in MintyDocs

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2.

  • Low 2.0

    SOAP message input validation fault could in theory cause OAM service resource exhaustion

    Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in the Single RAN baseband OAM service. No practical exploit has be…

  • Low 3.3

    The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network

    The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.

  • Low 3.1

    Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and earlier. If this vulnera…

  • Low 3.7

    Soumettre.fr <= 2.1.5 - Improper Authorization to Unauthenticated Soumettre Posts Creation/Modification/Deletion

    The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of data due to a improper authorization checks on the make_signature function in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated a…