Skip to content
OpenAdvisories

Archive

10 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /10 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

72 results · Feed

  • Critical 9.8
    CVE-2024-57687

    An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System …

  • High 8.0
    CVE-2024-57226

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif…

  • Critical 9.8
    CVE-2024-57224

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the ap…

  • Critical 9.3
    CVE-2024-57823

    In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parse…

    librdf Raptor RDF Syntax Library raptor2 raptor2 Debian Ubuntu Azure Linux
  • High 8.0
    CVE-2024-57211

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne par…

  • Medium 6.3
    CVE-2024-57213

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd par…

  • Medium 4.0
    CVE-2024-57822

    In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquad…

    librdf Raptor RDF Syntax Library raptor2 raptor2 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-57686

    A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record Sy…

  • High 8.0
    CVE-2024-57228

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif…

  • Critical 9.8
    CVE-2024-57225

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the r…

  • Medium 6.3
    CVE-2024-57214

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname param…

  • Medium 5.1
    CVE-2024-57212

    TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parame…

  • Critical 9.8
    CVE-2024-57223

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the ap…

  • High 7.5
    CVE-2024-25371

    Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW s…

  • Medium 5.4
    CVE-2024-54997

    MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field…

  • High 7.4
    CVE-2024-54848

    Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communic…

  • Medium 5.4
    CVE-2024-54998

    MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter…

  • Medium 6.5
    CVE-2024-54994

    MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the first_name and last_na…

  • Medium 5.9
    CVE-2024-54847

    An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH) parameters and access…

  • High 8.8
    CVE-2024-54996

    MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title an…

  • Medium 5.9
    CVE-2024-54849

    An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensiti…

  • Medium 5.9
    CVE-2024-54846

    An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data …

  • Medium 6.1
    CVE-2024-54687

    Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAnd…

  • Medium 4.7
    CVE-2024-54910 Public exploit

    Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function.

  • Medium 6.1
    CVE-2025-23110

    An issue was discovered in REDCap 14.9.6. A Reflected cross-site scripting (XSS) vulnerability in the email-subject fie…

    Vanderbilt REDCap
  • Critical 9.3
    CVE-2025-23016

    FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via craft…

    FastCGI fcgi libfcgi fcgi Debian Ubuntu Azure Linux
  • Medium 6.1
    CVE-2025-23112

    An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users …

    Vanderbilt REDCap
  • Medium 4.7
    CVE-2025-23111

    An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing users to a redir…

    Vanderbilt REDCap
  • Low 3.4
    CVE-2025-23113

    An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while perf…

    Vanderbilt REDCap
  • Medium 4.0
    CVE-2025-23022

    FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.

    FreeType FreeType
  • Critical 9.8
    CVE-2025-22946

    Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lea…

  • Critical 9.8
    CVE-2025-22949

    Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remot…