Skip to content
OpenAdvisories

Archive

3 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /3 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.1
    CVE-2024-56324

    GoCD vulnerable to XXE injection via abuse of pipeline XML "snippet" editing by group admins

    GoCD is a continuous deliver server. GoCD versions prior to 24.4.0 can allow GoCD "group admins" to abuse ability to edit the raw XML configuration for groups they administer to trigger XML External Entity (XXE) injection on the GoCD server. Theoretically, th…

    gocd gocd
  • Low 2.1
    CVE-2024-56322

    GoCD vulnerable to XXE injection via abuse of unused XML configuration repository functionality

    GoCD is a continuous deliver server. GoCD versions 16.7.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse a hidden/unused configuration repository (pipelines as code) feature to allow XML External Entity (XXE) injection on the GoCD Server which will…

    gocd gocd
  • Low 3.8
    CVE-2024-56321

    GoCD can allow malicious GoCD admins to abuse backup configuration to gain additional host access

    GoCD is a continuous deliver server. GoCD versions 18.9.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse the backup configuration "post-backup script" feature to potentially execute arbitrary scripts on the hosting server or container as GoCD's use…

    gocd gocd
  • Low 3.5
    CVE-2025-0175

    code-projects Online Shop view.php cross site scripting

    A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be init…

    code-projects Online Shop