Skip to content
OpenAdvisories

Archive

23 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /23 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.6
    CVE-2024-52325

    ECOVACS robot lawnmowers and vacuums command injection

    ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin() over an unauthenticated BLE connection.

    ECOVACS DEEBOT X2 COMBO DEEBOT X5 PRO DEEBOT X2 OMNI
  • Critical 9.8
    CVE-2025-0637

    Inadequate access control in Beta10

    It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to access private areas and/or areas intended for other r…

    Beta10 Beta10
  • Critical 9.8
    CVE-2024-57947

    netfilter: nf_set_pipapo: fix initial map fill

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each ro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2025-23006 Exploited · Ransomware EPSS 27%

    Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…

    SonicWall SMA1000 Network devices
    KEV Jan 24, 2025
  • Critical 9.0
    CVE-2024-52975

    Fleet Server sensitive information exposure via logs

    An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

    Elastic Fleet Server
  • Critical 9.8
    CVE-2024-55192

    OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlin…

    openimageio openimageio Debian Ubuntu
  • Critical 9.8
    CVE-2024-55194

    OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h.

    openimageio openimageio Debian Ubuntu
  • Critical 9.1
    CVE-2024-55573

    An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.1…

  • Critical 10.0
    CVE-2024-55971

    SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unaut…

  • Critical 9.1
    CVE-2024-53923

    An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.…

  • Critical 9.8
    CVE-2024-57328

    A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises be…