Skip to content
OpenAdvisories

Archive

4 August 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2013-10054 Public exploit

    LibrettoCMS File Manager Arbitrary File Upload

    An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plug…

  • Critical 9.8
    CVE-2025-50341 Public exploit

    A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can m…

  • Critical 9.6
    CVE-2025-50754 Public exploit

    Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A mal…