Skip to content
OpenAdvisories

Archive

3 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /3 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • High 7.5
    CVE-2024-53834

    In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bou…

    Google Android Android
  • High 7.8
    CVE-2024-11624

    there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of pri…

    Google Android Android
  • High 7.8
    CVE-2024-47032

    In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflo…

    Google Android Android
  • Medium 6.3
    CVE-2025-0176

    code-projects Point of Sales and Inventory Management System add_cart.php sql injection

    A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/add_cart.php. The manipulation of the argument id/qty leads to sql injec…

    code-projects Point of Sales and Inventory Management System
  • Low 3.5
    CVE-2025-0175

    code-projects Online Shop view.php cross site scripting

    A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be init…

    code-projects Online Shop
  • Medium 6.3
    CVE-2025-0174

    code-projects Point of Sales and Inventory Management System Parameter search_result2.php sql injection

    A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/search_result2.php of the component Parameter Handler. The manipulation of the ar…

    code-projects Point of Sales and Inventory Management System
  • Critical 9.8
    CVE-2024-55078

    An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows atta…

  • Critical 9.8
    CVE-2024-55507

    An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_…

  • High 8.8
    CVE-2024-35365

    FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specificall…

    ffmpeg ffmpeg libav Debian Ubuntu
  • Medium 6.2
    CVE-2024-36613

    FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, poten…

    ffmpeg ffmpeg libav Debian Ubuntu
  • High 7.5
    CVE-2024-48814

    SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewTy…

  • Medium 5.3
    CVE-2025-22376

    In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated f…

    libnet-oauth-perl libnet-oauth-perl Debian Ubuntu
  • Critical 9.3
    CVE-2025-22275

    iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from termin…

    iTerm2 iTerm2