Skip to content
OpenAdvisories

Archive

16 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /16 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-23922 Public exploit

    WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder embed-ispring allows Upload a Web Shell to a Web Server.This issue affects iSpring Embedder: from n/a through <= 1.0.

    Harsh iSpring Embedder
  • High 7.8
    CVE-2024-55511 Public exploit

    A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system…

  • None 0.0
    CVE-2024-50633 Public exploit

    Indico Insecure Access

    A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally …

    CERN Indico indico PyPI
  • Medium 5.5
    CVE-2024-57784 Public exploit

    An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a direc…

  • Medium 4.9
    CVE-2024-57785 Public exploit

    Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_upl…

  • Critical 9.8
    CVE-2025-22912 Public exploit

    RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.