Skip to content
OpenAdvisories

Archive

10 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /10 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-12847 Public exploit EPSS 30%

    NETGEAR DGN setup.cgi OS Command Injection

    NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerabil…

    NETGEAR DGN1000 Network devices
  • Critical 9.4
    CVE-2025-22152

    Improper Path Validation Enables Path Traversal in Multiple Components in Atheos

    Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execute arbitrary files on the server. These vulnerabilities can b…

    Atheos Atheos
  • Critical 9.3
    CVE-2024-56511 Scanner template EPSS 50%

    DataEase has an unauthorized vulnerability

    DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause the risk of unauthorized access. In the io.dataease.auth.filt…

    dataease dataease
  • Critical 9.8
    CVE-2024-41787

    IBM Engineering Requirements Management DOORS Next code execution

    IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely exec…

    IBM Engineering Requirements Management Doors Next
  • Critical 9.8
    CVE-2024-29970

    Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals.

  • Critical 9.8
    CVE-2024-29971

    Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.

  • Critical 9.8
    CVE-2024-57687

    An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System …

  • Critical 9.8
    CVE-2024-57224

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the ap…

  • Critical 9.3
    CVE-2024-57823

    In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parse…

    librdf Raptor RDF Syntax Library raptor2 raptor2 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-57686

    A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record Sy…

  • Critical 9.8
    CVE-2024-57225

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the r…

  • Critical 9.8
    CVE-2024-57223

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the ap…

  • Critical 9.3
    CVE-2025-23016

    FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via craft…

    FastCGI fcgi fcgi libfcgi Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-22946

    Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lea…

  • Critical 9.8
    CVE-2025-22949

    Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remot…