Skip to content
OpenAdvisories

Archive

10 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /10 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • High 8.8
    CVE-2024-9188

    Specially constructed queries cause cross platform scripting leaking administrator tokens

    Specially constructed queries cause cross platform scripting leaking administrator tokens

    Arista Networks Arista Edge Threat Management Network devices Browsers
  • High 7.6
    CVE-2024-47520

    A user with advanced report application access rights can perform actions for which they are not authorized

    A user with advanced report application access rights can perform actions for which they are not authorized

    Arista Networks Arista Edge Threat Management Network devices Browsers
  • High 8.3
    CVE-2024-47519

    Backup uploads to ETM subject to man-in-the-middle interception

    Backup uploads to ETM subject to man-in-the-middle interception

    Arista Networks Arista Edge Threat Management Network devices Browsers
  • High 8.3
    CVE-2024-9134

    Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

    Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.

    Arista Networks Arista Edge Threat Management Network devices Browsers
  • High 8.1
    CVE-2024-9132

    The administrator is able to configure an insecure captive portal script

    The administrator is able to configure an insecure captive portal script

    Arista Networks Arista Edge Threat Management Network devices Browsers
  • High 7.2
    CVE-2024-9131

    A user with administrator privileges can perform command injection

    A user with administrator privileges can perform command injection

    Arista Networks Arista Edge Threat Management Network devices Browsers
  • High 8.7
    CVE-2024-6662

    CSRF in MegaBIP

    Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user could be tricked into visiting a malicious website, which would…

    Jan Syski MegaBIP
  • High 8.3
    CVE-2025-22598

    WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome'

    WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the cadastrarSocio.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the local_re…

    LabRedesCefetRJ WeGIA
  • High 8.3
    CVE-2025-22597

    WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'

    WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the loca…

    LabRedesCefetRJ WeGIA
  • High 7.2
    CVE-2024-46210

    An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitr…

  • High 8.0
    CVE-2024-57227

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the ap…

  • High 8.0
    CVE-2024-57226

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif…

  • High 8.0
    CVE-2024-57211

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne par…

  • High 8.0
    CVE-2024-57228

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif…

  • High 7.5
    CVE-2024-25371

    Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW s…

  • High 7.4
    CVE-2024-54848

    Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communic…

  • High 8.8
    CVE-2024-54996

    MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title an…