Skip to content
OpenAdvisories

Archive

19 August 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-9140 Public exploit

    Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection

    A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this issue is some unknown functionality of the file /crm/crmapi/erp/tabdetail_moduleSave.php. The manipulation of the argument getvaluestring l…

  • Medium 6.5
    CVE-2025-50461 Public exploit

    A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script w…

  • Medium 5.3
    CVE-2025-50579 Public exploit

    A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particular…

  • Medium 5.3
    CVE-2025-51529 Public exploit

    Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin t…