Skip to content
OpenAdvisories

Archive

25 July 2025

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Low 3.5

    code-projects Church Donation System edit_members.php cross site scripting

    A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_members.php. The manipulation of the argument fname leads to cross s…

  • Low 3.5
    CVE-2025-8155 EPSS 25%

    D-Link DCS-6010L Management Application vb.htm cross site scripting

    A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vb.htm of the component Management Application. The manipulation of the argument paratest leads t…

  • Low 3.5

    KoaJS Koa HTTP Header response.js back redirect

    A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the component HTTP Header Handler. The manipulation of the argument Referrer leads to open redirect. It i…

  • Low 2.0

    HCL IEM is affected by a cookie attribute not set vulnerability

    HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.

  • Low 2.6

    HCL IEM is affected by a password in cleartext vulnerability

    HCL IEM is affected by a password in cleartext vulnerability.  Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit.

  • Low 2.6

    HCL IEM is affected by a concurrent login vulnerability

    HCL IEM is affected by a concurrent login vulnerability.  The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.

  • Low 3.7

    Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rat…

  • Low 2.9

    JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHips…