Skip to content
OpenAdvisories

Archive

8 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /8 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

85 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-40679

    IBM Db2 information disclosure

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file under specific conditions.

    IBM Db2
  • Medium 6.5
    CVE-2024-55459

    keras Path Traversal vulnerability

    An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.

    kubeflow-pipelines-visualization-server keras keras keras Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 6.4
    CVE-2024-53526

    Composio Command Execution vulnerability

    composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.

    composio-julep composio-openai composio-claude PyPI
  • Medium 6.0
    CVE-2024-52869

    Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. S…

  • Medium 4.0
    CVE-2024-54731

    cpdf through 2.8 allows stack consumption via a crafted PDF document.

    Coherent Graphics CPDF