Skip to content
OpenAdvisories

Archive

5 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /5 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.4
    CVE-2024-13143

    ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scripting

    A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument ur…

    ZeroWdd studentmanager
  • Low 2.4
    CVE-2024-13142

    ZeroWdd studentmanager RoleController. java submitAddRole cross site scripting

    A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument nam…

    ZeroWdd studentmanager
  • Low 2.4
    CVE-2025-0228

    code-projects Local Storage Todo App index.html cross site scripting

    A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The atta…

    code-projects Local Storage Todo App
  • Low 3.5
    CVE-2024-13141

    osuuu LightPicture SVG File Upload upload cross site scripting

    A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scriptin…

    osuuu LightPicture
  • Low 2.4
    CVE-2025-0220

    Trimble SPS851 Ethernet Configuration Menu cross site scripting

    A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to ini…

    Trimble SPS851
  • Low 3.5
    CVE-2024-13140

    Emlog Pro Cover Upload article.php cross site scripting

    A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Handler. The manipulation of the argument image leads to cross …

  • Low 2.4
    CVE-2024-13137

    wangl1989 mysiteforme SiteController RestResponse cross site scripting

    A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site script…

    wangl1989 mysiteforme
  • Low 3.5
    CVE-2024-13135

    Emlog Pro Subpage twitter.php cross site scripting

    A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The at…

  • Low 2.4
    CVE-2025-0219

    Trimble SPS851 Receiver Status Identity Tab cross site scripting

    A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site…

    Trimble SPS851
  • Low 3.5
    CVE-2024-13132

    Emlog Pro Subpage article.php cross site scripting

    A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated …