Skip to content
OpenAdvisories

Archive

2 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /2 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2024-9950 Public exploit

    Abuse of Unauthenticated Compliance Recheck in SecureConnector

    A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory.

    Forescout SecureConnector
  • Medium 6.6
    CVE-2024-56264 Public exploit

    WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector acf-city-selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through <= 1.14.0.

    Beee ACF City Selector
  • Critical 9.1
    CVE-2024-56249 Public exploit

    WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through <= 1.13.1.

    Ludwig You WPMasterToolKit
  • High 8.8
    CVE-2023-47179 Public exploit

    WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

    Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.4.6.

    mdalabar WooODT Lite
  • Medium 5.4
    CVE-2023-45828 Public exploit

    WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live Group Chat: from n/a through <= 6.2.5.

    RumbleTalk RumbleTalk Live Group Chat
  • High 7.2
    CVE-2024-12912 Public exploit

    An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. …

    ASUS Router
  • Medium 4.7
    CVE-2024-48197 Public exploit

    Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via th…