Skip to content
OpenAdvisories

Archive

24 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /24 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-0710

    CampCodes School Management Software Notice Board Page notice-list cross site scripting

    A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scri…

    Campcodes School Management Software
  • Low 2.4
    CVE-2025-0709

    Dcat-Admin Roles Page roles cross site scripting

    A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown processing of the file /admin/auth/roles of the component Roles Page. The manipulation leads to cross site scripting. The attack may be initi…

  • Low 3.5
    CVE-2025-0708

    fumiao opencms Add Model Management Page addOrUpdate cross site scripting

    A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross…

    fumiao opencms
  • Low 2.4
    CVE-2025-0706

    JoeyBling bootplus admin.html cross site scripting

    A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site scriptin…

    JoeyBling bootplus
  • Low 2.8
    CVE-2024-35122

    IBM i denial of service

    IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an insufficient authority requirement. A local non-privileged user can configure a referential constraint with the privileges of a user socially engineered to access …

    IBM i
  • Low 1.3
    CVE-2025-24025

    Coolify Vulnerable to Reflected XSS on Tag Search

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the erro…

    coollabsio coolify