Skip to content
OpenAdvisories

Archive

13 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /13 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-22144

    Account Takeover in NamelessMC

    NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is successfully approved by em…

    NamelessMC Nameless
  • Critical 9.8
    CVE-2024-5743

    Command Injection Vulnerability

    An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42.

    EveHome Eve Play
  • Critical 9.8
    CVE-2025-22777 Public exploit

    WordPress GiveWP Plugin <= 3.19.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects GiveWP: from n/a through <= 3.19.3.

    stellarwp GiveWP
  • Critical 9.1
    CVE-2024-46310 Scanner template

    Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary…

  • Critical 9.9
    CVE-2024-46479

    Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated …

    Venki Supravizio BPM
  • Critical 9.1
    CVE-2024-57811

    In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SS…