Skip to content
OpenAdvisories

Archive

7 July 2025

Vulnerabilities first published on this day (UTC), newest first.

175 results · Feed

  • Critical 9.1

    LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler …

  • Critical 9.8

    LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_str…

  • High 7.5

    LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which …

  • Medium 6.1

    An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via thebb…

  • Medium 6.1

    An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the b…

  • Medium 6.1
    CVE-2024-37656 Scanner template

    An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the i…

  • Critical 9.8

    Insufficient security mechanisms for created containers in educoder challenges v1.0 allow attackers to execute arbitrar…

  • Critical 9.8

    employee record management system in php and mysql v1 was discovered to contain a SQL injection vulnerability via the l…

  • High 7.5

    A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The firmware file, rootfs.tar.gz…

  • High 7.5

    An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length ch…

  • Critical 9.8

    flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not con…

  • Critical 9.8

    fblog through 983bede allows account takeover via the password reset feature because SERVER_NAME is not configured and …

  • Critical 9.8

    Hashview 0.8.1 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a …

  • Critical 9.8

    JobCenter through 7e7b0b2 allows account takeover via the password reset feature because SERVER_NAME is not configured …

  • Critical 9.1

    In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1…