Skip to content
OpenAdvisories

Archive

21 August 2025

Vulnerabilities first published on this day (UTC), newest first.

48 results · Clear filters · Feed

  • Medium 5.3

    Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attack…

  • Medium 6.5

    Cross-site scripting (XSS) vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to exec…

  • Medium 6.5

    An issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated attackers to cause a Denial …

  • Medium 5.3

    Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitraril…

  • Medium 5.3

    Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attacker…

  • Medium 5.4

    SQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers…

  • Medium 5.4

    MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute a…

  • Medium 5.3

    An XML external entities (XXE) injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1…