Skip to content
OpenAdvisories

Archive

6 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /6 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-21613

    go-git has an Argument Injection via the URL field

    go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Critical 9.1
    CVE-2024-5594

    OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to…

    OpenVPN OpenVPN openvpn openvpn Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2024-20148

    In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (pr…

    MediaTek MT3603, MT6835, MT6878, MT6886, MT6897, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8766, MT8768, MT8775, MT8796, MT8798
  • Critical 9.8
    CVE-2024-55529

    Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template.

  • Critical 9.1
    CVE-2024-53931

    The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any appl…

  • Critical 9.1
    CVE-2024-53932

    The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1…

  • Critical 9.8
    CVE-2024-46622

    An Escalation of Privilege security vulnerability was found in SecureAge Security Suite software 7.0.x before 7.0.38, 7…

  • Critical 9.1
    CVE-2024-54879 Public exploit

    SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user …

  • Critical 9.1
    CVE-2024-54880 Public exploit

    SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user …

  • Critical 9.8
    CVE-2024-56828

    File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/mem…