Skip to content
OpenAdvisories

Archive

12 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /12 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Medium 6.3
    CVE-2025-0402

    1902756969 reggie CommonController.java upload unrestricted upload

    A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument file leads to unre…

    1902756969 reggie
  • Medium 5.3
    CVE-2025-0401 Public exploit

    1902756969 reggie CommonController.java download path traversal

    A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the function download of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument name leads to path traversal. It …

    1902756969 reggie
  • Low 2.4
    CVE-2025-0400

    StarSea99 starsea-mall update cross site scripting

    A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/categories/update. The manipulation of the argument categoryName leads to cross site scripting. The attack…

    StarSea99 starsea-mall
  • Medium 4.7
    CVE-2025-0399

    StarSea99 starsea-mall uploadController.java UploadController unrestricted upload

    A vulnerability was found in StarSea99 starsea-mall 1.0. It has been declared as critical. This vulnerability affects the function UploadController of the file src/main/java/com/siro/mall/controller/common/uploadController.java. The manipulation of the argume…

    StarSea99 starsea-mall
  • Low 1.6
    CVE-2024-42181

    HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability

    HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

    HCL Software DRYiCE MyXalytics
  • Low 1.6
    CVE-2024-42180

    HCL MyXalytics is affected by a malicious file upload vulnerability

    HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious fil…

    HCL Software DRYiCE MyXalytics
  • Low 2.0
    CVE-2024-42179

    HCL MyXalytics is affected by sensitive information disclosure vulnerability

    HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API∕2.0 as the server's name & version.

    HCL Software DRYiCE MyXalytics
  • Low 2.4
    CVE-2025-0398

    longpi1 warehouse Backend updateInport cross site scripting

    A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark …

    longpi1 warehouse
  • Medium 5.9
    CVE-2024-51456

    IBM Robotic Process Automation information disclosure

    IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.

    IBM Robotic Process Automation
  • Low 3.5
    CVE-2025-0397

    reckcn SPPanAdmin edit cross site scripting

    A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack …

    reckcn SPPanAdmin
  • High 7.8
    CVE-2025-0396

    exelban stats XPC Service shouldAcceptNewConnection command injection

    A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulation leads to command injection. It is possible to launch the…

    exelban stats
  • Medium 5.4
    CVE-2021-29669

    IBM Jazz Foundation cross-site scripting

    IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials discl…

    IBM Jazz Foundation
  • Medium 5.4
    CVE-2024-49785

    IBM watsonx.ai cross-site scripting

    IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended func…

    IBM watsonx.ai on Cloud Pak for Data watsonx.ai