Skip to content
OpenAdvisories

Archive

17 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /17 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 1.8
    CVE-2025-23206

    IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk

    The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints a…

    AWS AWS CDK aws-cdk-lib npm
  • Low 3.5
    CVE-2025-0538

    code-projects Tourism Management System manage-pages.php cross site scripting

    A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It …

    code-projects Tourism Management System
  • Low 2.4
    CVE-2025-0537

    code-projects Car Rental Management System manage-pages.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross s…

    code-projects Car Rental Management System
  • Low 3.5
    CVE-2024-54681

    Ossur Mobile Logic Application Command Injection

    Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application.

    Ossur Mobile Logic Application
  • Low 3.5
    CVE-2025-0530

    code-projects Job Recruitment _feedback_system.php cross site scripting

    A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /_parse/_feedback_system.php. The manipulation of the argument type leads to cross site scripting. The attac…

    code-projects Job Recruitment