Skip to content
OpenAdvisories

Archive

14 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /14 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-47605 Public exploit

    Cross-site Scripting via insert media remote file oembed in silverstripe-asset-admin

    silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing t…

    silverstripe silverstripe-asset-admin silverstripe/framework Packagist
  • Medium 5.5
    CVE-2025-21340 Public exploit

    Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

    Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 5.3
    CVE-2024-12008 Public exploit Scanner template

    W3 Total Cache <= 2.8.1 Information Exposure via Log Files

    The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive informati…

    Bold Grid W3 Total Cache Web / CMS
  • Medium 6.1
    CVE-2024-50861 Public exploit

    The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious co…

  • Medium 4.8
    CVE-2024-50857 Public exploit Scanner template

    The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and e…

  • Medium 4.8
    CVE-2024-50859 Public exploit

    The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly form…