Skip to content
OpenAdvisories

Archive

16 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /16 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 1.3
    CVE-2025-53904

    The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability

    The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website vulnerable to cross-site scripting. No known patches exist as of time of publication.

    The-Scratch-Channel the-scratch-channel.github.io
  • Low 2.4
    CVE-2025-53840

    Icinga DB Web Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    Icinga DB Web provides a graphical interface for Icinga monitoring. Starting in version 1.2.0 and prior to version 1.2.2, users with access to Icinga Dependency Views, are allowed to see hosts and services that they weren't meant to on the dependency map. How…

    Icinga icingadb-web
  • Low 3.1
    CVE-2025-7703

    Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.

    TECNO tech.palm.id
  • Low 2.4
    CVE-2025-52687

    JavaScript Injection Vulnerability in the OmniAccess Stellar Web Management Interface

    Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service (DoS).

    Alcatel-Lucent OmniAccess Stellar