Skip to content
OpenAdvisories

Archive

14 July 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 1.7

    AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.12.14, the Python parser is vulnerable to a request smuggling vulnerability due to not parsing trailer sections of an HTTP request. If a pure Python version of …

  • Low 3.7

    ImageMagick has Memory Leak in magick stream

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in a filename template …

  • Low 3.7

    ImageMagick has Heap Buffer Overflow in InterpretImageFilename

    ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes o…

  • Low 3.5

    PHPGurukul Online Library Management System student-history.php cross site scripting

    A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripti…

  • Low 3.7

    Teledyne FLIR FB-Series O/FLIR FH-Series ID hard-coded password

    A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. T…

  • Low 3.5

    Bigotry OneBase think_exception.tpl parse_args cross site scripting

    A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parse_args of the file /tpl/think_exception.tpl. The manipulation of the argument args leads to cross site scripting.…

  • Low 2.4

    Sapido RB-1802 URL Filtering Page urlfilter.asp cross site scripting

    A vulnerability classified as problematic was found in Sapido RB-1802 1.0.32. This vulnerability affects unknown code of the file urlfilter.asp of the component URL Filtering Page. The manipulation of the argument URL address leads to cross site scripting. Th…