Skip to content
OpenAdvisories

Archive

3 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /3 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.4
    CVE-2024-56320

    GoCD vulnerable to admin privilege escalation by a malicious internal/existing authenticated user

    GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorization of access to the admin "Configuration XML" UI feature, and its associated API. A malicious insider/existing authentic…

    gocd gocd
  • Critical 9.8
    CVE-2024-9140

    Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-…

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT
  • Critical 9.8
    CVE-2024-53842

    In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds chec…

    Google Android Android
  • Critical 9.8
    CVE-2024-55078

    An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows atta…

  • Critical 9.8
    CVE-2024-55507

    An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_…

  • Critical 9.3
    CVE-2025-22275

    iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from termin…

    iTerm2 iTerm2