Skip to content
OpenAdvisories

Archive

3 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /3 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2024-51775

    Apache Zeppelin: Command Injection via CSWSH

    Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server from another origin without any restriction, and get internal information about paragraphs.  This issue affects Apache Zeppelin: from 0.11.…

    Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-shell Maven
  • High 7.5
    CVE-2024-52279

    Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

    Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.1…

    Apache Software Foundation Apache Zeppelin org.apache.zeppelin:zeppelin-jdbc Maven
  • High 7.3
    CVE-2025-8503

    code-projects Online Medicine Guide adaddmed.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected by this issue is some unknown functionality of the file /adaddmed.php. The manipulation of the argument mname leads to sql injection. The at…

    code-projects Online Medicine Guide
  • High 7.3
    CVE-2025-8502

    code-projects Online Medicine Guide changepass.php sql injection

    A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the file /changepass.php. The manipulation of the argument ups leads to sql injection. The attack can be…

    code-projects Online Medicine Guide
  • High 7.3
    CVE-2025-8499

    code-projects Online Medicine Guide cusfindambulence2.php sql injection

    A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cusfindambulence2.php. The manipulation of the argument Search leads to sql injection. The attack can …

    code-projects Online Medicine Guide
  • High 7.3
    CVE-2025-8498

    code-projects Online Medicine Guide index.php sql injection

    A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. Th…

    code-projects Online Medicine Guide
  • High 7.3
    CVE-2025-8497

    code-projects Online Medicine Guide cusfindphar2.php sql injection

    A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit ha…

    code-projects Online Medicine Guide
  • High 7.3
    CVE-2025-8496

    projectworlds Online Admission System viewform.php sql injection

    A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewform.php. The manipulation of the argument ID leads to sql injection. The attac…

    Project Worlds Online Admission System
  • High 7.3
    CVE-2025-8495

    code-projects Intern Membership Management System edit_admin_query.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/edit_admin_query.php. The manipulation of the argument Username leads to sql injection. I…

    code-projects Intern Membership Management System
  • High 8.9
    CVE-2025-54351

    In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

    ES iperf3 iperf3 iperf3 Ubuntu Alpine