Skip to content
OpenAdvisories

Archive

14 July 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53887 Public exploit Scanner template

    Directus's exact version number is exposed by the OpenAPI Spec

    Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, the exact Directus version number is incorrectly being used as OpenAPI Spec version this means that it is being exposed by …

  • Medium 5.3
    CVE-2025-53640 Public exploit

    Indico vulnerable to user enumeration via API endpoint

    Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields (such as ACLs) could be …

  • Medium 6.3
    CVE-2025-7558 Public exploit

    code-projects Voting System positions_add.php sql injection

    A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack…