Skip to content
OpenAdvisories

Archive

15 January 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-52005 Public exploit

    The sideband payload is passed unfiltered to the terminal in git

    Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "r…

  • High 8.1
    CVE-2024-11848 Public exploit

    NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nitropack_dismiss_notice_forever' AJAX action in all versions up to, and including, 1.17.0. This makes it possible for authenticate…

  • High 8.1
    CVE-2025-22964 Public exploit

    DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability cause…