Skip to content
OpenAdvisories

Archive

6 January 2025

Vulnerabilities first published on this day (UTC), newest first.

46 results · Clear filters · Feed

  • Medium 6.1

    A reflected Cross-Site Scripting (XSS) vulnerability exists in the login page of IceHRM v32.4.0.OS. The vulnerability i…

  • Medium 5.4
    CVE-2024-46209 Public exploit

    REDAXO CMS Cross-site Scripting vulnerability

    A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter.

  • Medium 6.1

    Open Redirect vulnerability in Pnetlab 5.3.11 allows an attacker to manipulate URLs to redirect users to arbitrary exte…

  • Medium 4.1

    Cross-Site Scripting (XSS) vulnerability in Pnetlab 5.3.11 allows an attacker to inject malicious scripts into a web pa…

  • Medium 6.5
    CVE-2024-54763 Scanner template

    An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensit…

  • Medium 6.5
    CVE-2024-54764 Scanner template

    An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensi…