Skip to content
OpenAdvisories

Archive

10 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /10 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-12847 Public exploit EPSS 30%

    NETGEAR DGN setup.cgi OS Command Injection

    NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerabil…

    NETGEAR DGN1000 Network devices
  • Medium 6.1
    CVE-2024-33298 Public exploit

    Microweber Cross-site Scripting vulnerability

    Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup

    microweber/microweber Packagist
  • Medium 4.7
    CVE-2024-33299 Public exploit

    Microweber Cross-site Scripting vulnerability

    Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users

    microweber/microweber Packagist
  • Medium 4.7
    CVE-2024-33297 Public exploit

    Microweber Cross-site Scripting vulnerability

    Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function

    microweber/microweber Packagist
  • Medium 4.7
    CVE-2024-54910 Public exploit

    Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function.