Skip to content
OpenAdvisories

Archive

22 January 2025

Vulnerabilities first published on this day (UTC), newest first.

49 results · Clear filters · Feed

  • Medium 5.3

    Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the…

  • Medium 5.3

    Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the…

  • Medium 6.5

    A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scri…

  • Medium 5.3

    A reachable assertion in the ogs_kdf_hash_mme function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Servic…

  • Medium 5.7

    GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is …

  • Medium 6.4

    In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An atta…

  • Medium 5.7

    D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /New_GUI/ParentalControl.asp.

  • Medium 5.4

    Cross site scripting in Silverpeas Core

    Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload i…

  • Medium 6.7

    A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID param…