Skip to content
OpenAdvisories

Archive

4 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /4 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.5
    CVE-2024-41766

    IBM Engineering Lifecycle Optimization - Publishing denial of service

    IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular expression.

    IBM Engineering Lifecycle Optimization Publishing
  • High 7.3
    CVE-2024-41767

    IBM Engineering Lifecycle Optimization - Publishing SQL injection

    IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end datab…

    IBM Engineering Lifecycle Optimization Publishing
  • High 7.3
    CVE-2025-0210

    Campcodes School Faculty Scheduling System ajax.php sql injection

    A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads t…

    Campcodes School Faculty Scheduling System
  • High 8.8
    CVE-2024-10957

    UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection

    The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for…

    David Anderson UpdraftPlus: WP Backup & Migration Plugin Web / CMS
  • High 7.3
    CVE-2025-0207

    code-projects Online Shoe Store login.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. T…

    code-projects Online Shoe Store
  • High 8.8
    CVE-2024-10932

    Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'

    The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the 'recursive_unserialize_replace' function. This makes it possible for unauthenticated atta…

    Inisev BackupBliss – Backup & Migration with Free Cloud Storage Web / CMS
  • High 8.0
    CVE-2025-22389

    An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the …

  • High 7.3
    CVE-2025-22386

    An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity session issue exists in th…

  • High 7.5
    CVE-2025-22390

    An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the …

  • High 7.5
    CVE-2025-22384

    An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business …

  • High 7.5
    CVE-2025-22387

    An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests f…