Skip to content
OpenAdvisories

Archive

6 January 2025

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • High 7.0
    CVE-2024-46981 Public exploit

    Redis' Lua library commands may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17…

  • Low 3.9
    CVE-2024-12970 Public exploit

    OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2.

  • High 8.8
    CVE-2024-20154 Public exploit

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executi…

  • High 7.5
    CVE-2024-48457 Public exploit

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi…

  • Low 2.7
    CVE-2024-48455 Public exploit Scanner template

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi…

  • High 7.5
    CVE-2024-48456 Public exploit EPSS 17%

    An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi…

  • Medium 5.4
    CVE-2024-46209 Public exploit

    REDAXO CMS Cross-site Scripting vulnerability

    A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter.

  • Critical 9.1
    CVE-2024-54879 Public exploit

    SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user …

  • High 7.5
    CVE-2024-54767 Public exploit Scanner template

    An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain se…

  • Critical 9.1
    CVE-2024-54880 Public exploit

    SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user …

  • High 8.4
    CVE-2021-27285 Public exploit

    An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execu…