Skip to content
OpenAdvisories

Archive

20 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /20 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.7
    CVE-2024-51738

    Sunshine improperly enforces pairing protocol request order

    Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a …

    LizardByte Sunshine
  • High 7.8
    CVE-2025-21655

    io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period

    In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_eventfd_do_signal() is invoked from an RCU callback, but when dropping the reference to the io_ev_fd, it calls io_eve…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.6
    CVE-2025-0479

    Security Misconfiguration Vulnerability in CP Plus Router

    This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Succ…

    CP-Plus CP-XR-DE21-S Router
  • High 7.8
    CVE-2023-52923

    netfilter: nf_tables: adapt set backend to use GC transaction API

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: adapt set backend to use GC transaction API Use the GC transaction API to replace the old and buggy gc API and the busy mark approach. No set elements are removed from a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-0590

    Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.

    TECNO com.transsion.carlcare
  • High 7.3
    CVE-2025-0579

    Shiprocket Module REST API Module restapi sql injection

    A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php?route=extension/shiprocket/module/restapi of the component REST API Module. The…

  • High 7.2
    CVE-2025-0586

    aEnrich Technology a+HRD - Insecure Deserialization

    The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution.

    aEnrich a+HRD
  • High 8.4
    CVE-2025-24337

    Insecure default config access in WriteFreely

    WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.

    Musing Studio WriteFreely github.com/writefreely/writefreely Go