Skip to content
OpenAdvisories

Archive

9 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /9 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-21385 Public exploit EPSS 28%

    Microsoft Purview Information Disclosure Vulnerability

    A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.

    Microsoft Microsoft Purview
  • High 7.2
    CVE-2025-22510 Public exploit

    WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in kkarpieszuk WC Price History for Omnibus wc-price-history allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through <= 2.1.4.

    kkarpieszuk WC Price History for Omnibus
  • High 8.2
    CVE-2023-24012 Public exploit

    Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Open DDS

    An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s…

    OpenDDS DDS
  • High 8.6
    CVE-2024-12542 Public exploit

    linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read conf…

    linkid linkID Web / CMS
  • High 8.2
    CVE-2024-53704 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…

    SonicWall SonicOS Network devices
    KEV Feb 18, 2025
  • Critical 9.8
    CVE-2023-28354 Public exploit

    An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against af…

  • High 8.0
    CVE-2024-54887 Public exploit

    TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver…

  • Medium 6.3
    CVE-2024-54761 Public exploit

    BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.