Skip to content
OpenAdvisories

Archive

6 August 2025

Vulnerabilities first published on this day (UTC), newest first.

217 results · Feed

  • Medium 5.3

    An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.

  • Low 3.2

    jsrsasign v11.1.0 was discovered to contain weak encryption. NOTE: this issue has been disputed by a third party who be…

  • High 7.0

    poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that ke…

  • Critical 9.8

    An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or …

  • Medium 5.3

    In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a …

  • Medium 6.5

    Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/p…

  • Medium 6.5

    Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high priv…

  • Medium 6.5

    In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the a…

  • Medium 6.5

    A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem…

  • Medium 6.5

    A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read …

  • Medium 6.1

    A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to injec…

  • High 7.6

    Cross-site scripting (XSS) vulnerability in Zone Bitaqati thru 3.4.0.

  • High 8.2

    An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write …

  • High 7.5

    Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Datab…

  • High 8.6

    Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 20…

  • High 7.5
    CVE-2025-51040 Public exploit

    Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html en…

  • Medium 6.1

    A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute ar…